last executing test programs: 2.079493253s ago: executing program 2 (id=4043): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x9609, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.281435661s ago: executing program 3 (id=4046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.125767145s ago: executing program 2 (id=4047): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x115264, 0x8, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) 1.055619697s ago: executing program 3 (id=4048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 911.41252ms ago: executing program 1 (id=4051): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6a0a, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 911.3398ms ago: executing program 2 (id=4052): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x100, 0xffffffffffffffff, 0xdab5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) 863.721941ms ago: executing program 3 (id=4053): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x2000, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x7ffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000003600000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 764.751463ms ago: executing program 0 (id=4054): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x26, &(0x7f0000000300)=ANY=[], 0x20) 764.550353ms ago: executing program 2 (id=4055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 665.227905ms ago: executing program 1 (id=4056): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0xe9) 603.789467ms ago: executing program 0 (id=4057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 575.900857ms ago: executing program 3 (id=4058): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ff, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000004c0), 0x7ff, r0}, 0x38) 549.388898ms ago: executing program 0 (id=4059): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 415.643741ms ago: executing program 1 (id=4060): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2104b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x18, 0x0, 0x0, 0x900}, 0x20004020) 415.353571ms ago: executing program 0 (id=4061): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x18, 0x80000, 0x2, &(0x7f0000000a40)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 413.681131ms ago: executing program 2 (id=4062): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4018, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x112fa, 0x4, 0x95, 0x0, 0x2, 0xffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 352.536982ms ago: executing program 1 (id=4063): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x0, 0xa0, 0x0, 0x0, 0x5d35, 0x4008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x100000, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c) 293.644274ms ago: executing program 3 (id=4064): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) 207.652666ms ago: executing program 0 (id=4065): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x26, &(0x7f0000000300)=ANY=[], 0x20) 193.245476ms ago: executing program 2 (id=4066): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 170.557097ms ago: executing program 1 (id=4067): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) 115.717048ms ago: executing program 3 (id=4068): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 115.518138ms ago: executing program 0 (id=4069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80004000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 0s ago: executing program 1 (id=4070): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312}, 0x40002002) kernel console output (not intermixed with test programs): disabled state [ 810.156155][T15236] bridge_slave_1: entered allmulticast mode [ 810.184658][T15236] bridge_slave_1: entered promiscuous mode [ 810.320725][ T51] Bluetooth: hci4: command tx timeout [ 810.349693][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.490586][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.664765][T15236] team0: Port device team_slave_0 added [ 810.752523][T15236] team0: Port device team_slave_1 added [ 810.903128][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.931069][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.950246][T15291] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2723'. [ 810.980002][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.995137][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.012178][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.039193][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.053685][T15287] netlink: 'syz.2.2723': attribute type 21 has an invalid length. [ 811.133946][T15291] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 811.359884][T15236] hsr_slave_0: entered promiscuous mode [ 811.389588][T15236] hsr_slave_1: entered promiscuous mode [ 811.415482][T15236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.424182][T15236] Cannot create hsr debugfs directory [ 811.687779][T15296] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2725'. [ 811.733545][T15296] netlink: zone id is out of range [ 811.747026][T15311] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 811.757149][T15296] netlink: zone id is out of range [ 811.766063][T15296] netlink: zone id is out of range [ 811.780264][T15311] syzkaller1: linktype set to 805 [ 811.789392][T15296] netlink: zone id is out of range [ 811.819556][T15296] netlink: zone id is out of range [ 811.828636][T15296] netlink: zone id is out of range [ 811.845643][T15296] netlink: zone id is out of range [ 811.851102][T15296] netlink: zone id is out of range [ 812.009910][T15319] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2729'. [ 812.399923][ T51] Bluetooth: hci4: command tx timeout [ 814.401802][ T6176] hsr_slave_0: left promiscuous mode [ 814.415125][ T6176] hsr_slave_1: left promiscuous mode [ 814.440213][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.447867][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.470425][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.477938][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.494667][ T51] Bluetooth: hci4: command tx timeout [ 814.510938][ T6176] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 814.518766][ T6176] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 814.662025][ T6176] bridge0: port 4(dummy0) entered disabled state [ 814.697257][ T6176] hsr0: left allmulticast mode [ 814.709248][ T6176] bridge0: port 3(hsr0) entered disabled state [ 814.730989][ T6176] bridge_slave_0: left allmulticast mode [ 814.749070][ T6176] bridge_slave_0: left promiscuous mode [ 814.765098][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.879743][ T6176] veth0_macvtap: left promiscuous mode [ 815.657324][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 815.714247][ T6176] team0 (unregistering): Port device C removed [ 815.916635][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.002902][ T6176] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 816.207100][ T6176] team0 (unregistering): Port device batadv0 removed [ 816.282588][ T6176] bond0 (unregistering): (slave team0): Releasing backup interface [ 816.317885][ T6176] bond0 (unregistering): Released all slaves [ 816.509216][T15236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.542247][T15236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.559450][ T51] Bluetooth: hci4: command tx timeout [ 816.599622][T15236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.649880][T15236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.988171][T15390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 816.995547][T15390] IPv6: NLM_F_CREATE should be set when creating new route [ 817.002925][T15390] IPv6: NLM_F_CREATE should be set when creating new route [ 817.010240][T15390] IPv6: NLM_F_CREATE should be set when creating new route [ 817.159335][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.246188][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.286762][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.294146][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.342967][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.350289][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.890315][T15410] net_ratelimit: 18 callbacks suppressed [ 817.890352][T15410] Dead loop on virtual device ip6_vti0, fix it urgently! [ 818.284236][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.624275][T15236] veth0_vlan: entered promiscuous mode [ 818.661785][T15236] veth1_vlan: entered promiscuous mode [ 818.761780][T15236] veth0_macvtap: entered promiscuous mode [ 818.788215][T15236] veth1_macvtap: entered promiscuous mode [ 818.822880][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.845285][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.855955][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.872734][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.884077][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.895130][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.907830][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.945822][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.967311][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.986623][T15236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.998265][T15236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.021211][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.076878][T15236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.114134][T15236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.128846][T15236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.138321][T15236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.391639][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.421438][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.517954][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.557219][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.444375][T15509] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.2765'. [ 823.942838][T15538] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2770'. [ 825.338778][T15565] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2778'. [ 826.221677][T15582] FAULT_INJECTION: forcing a failure. [ 826.221677][T15582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.249047][T15582] CPU: 1 PID: 15582 Comm: syz.0.2785 Not tainted syzkaller #0 [ 826.256600][T15582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.266685][T15582] Call Trace: [ 826.269991][T15582] [ 826.272946][T15582] dump_stack_lvl+0x18c/0x250 [ 826.277665][T15582] ? show_regs_print_info+0x20/0x20 [ 826.282891][T15582] ? load_image+0x420/0x420 [ 826.287782][T15582] ? __might_fault+0xaa/0x120 [ 826.292488][T15582] ? __lock_acquire+0x7d80/0x7d80 [ 826.297576][T15582] should_fail_ex+0x394/0x4c0 [ 826.302296][T15582] _copy_from_user+0x2f/0xe0 [ 826.306913][T15582] __sys_bpf+0x23e/0x890 [ 826.311190][T15582] ? bpf_link_show_fdinfo+0x390/0x390 [ 826.316603][T15582] ? lock_chain_count+0x20/0x20 [ 826.321535][T15582] __x64_sys_bpf+0x7c/0x90 [ 826.325982][T15582] do_syscall_64+0x55/0xb0 [ 826.330430][T15582] ? clear_bhb_loop+0x40/0x90 [ 826.335141][T15582] ? clear_bhb_loop+0x40/0x90 [ 826.339849][T15582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.345785][T15582] RIP: 0033:0x7f0a18b9e159 [ 826.350237][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.369867][T15582] RSP: 002b:00007f0a199f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.378306][T15582] RAX: ffffffffffffffda RBX: 00007f0a18e25fa0 RCX: 00007f0a18b9e159 [ 826.386341][T15582] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 826.394345][T15582] RBP: 00007f0a199f5090 R08: 0000000000000000 R09: 0000000000000000 [ 826.402342][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.410348][T15582] R13: 00007f0a18e26038 R14: 00007f0a18e25fa0 R15: 00007ffd144b3208 [ 826.418378][T15582] [ 826.924631][T15601] netlink: 'syz.2.2789': attribute type 1 has an invalid length. [ 826.957044][T15601] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2789'. [ 827.622653][T15615] netlink: 'syz.1.2795': attribute type 19 has an invalid length. [ 827.649650][T15615] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2795'. [ 827.823750][T15627] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2796'. [ 827.869581][T15627] netlink: zone id is out of range [ 827.875299][T15627] netlink: zone id is out of range [ 827.898628][T15627] netlink: zone id is out of range [ 827.916590][T15627] netlink: zone id is out of range [ 827.935291][T15627] netlink: zone id is out of range [ 827.953184][T15627] netlink: zone id is out of range [ 827.965248][T15627] netlink: zone id is out of range [ 827.987639][T15627] netlink: zone id is out of range [ 828.002609][T15627] netlink: zone id is out of range [ 828.018458][T15627] netlink: zone id is out of range [ 829.484987][T15671] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.2806'. [ 831.106081][T15718] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2823'. [ 831.604739][T15729] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2827'. [ 831.622493][T15729] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2827'. [ 832.200857][T15748] FAULT_INJECTION: forcing a failure. [ 832.200857][T15748] name failslab, interval 1, probability 0, space 0, times 0 [ 832.229258][T15748] CPU: 1 PID: 15748 Comm: syz.3.2833 Not tainted syzkaller #0 [ 832.236821][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.246925][T15748] Call Trace: [ 832.250257][T15748] [ 832.253248][T15748] dump_stack_lvl+0x18c/0x250 [ 832.258006][T15748] ? show_regs_print_info+0x20/0x20 [ 832.263289][T15748] ? load_image+0x420/0x420 [ 832.267835][T15748] ? __might_sleep+0xe0/0xe0 [ 832.272455][T15748] ? __lock_acquire+0x7d80/0x7d80 [ 832.277579][T15748] ? mark_lock+0x94/0x320 [ 832.281968][T15748] should_fail_ex+0x394/0x4c0 [ 832.286720][T15748] should_failslab+0x9/0x20 [ 832.291316][T15748] slab_pre_alloc_hook+0x59/0x300 [ 832.296411][T15748] ? __get_vm_area_node+0x125/0x370 [ 832.301683][T15748] __kmem_cache_alloc_node+0x53/0x250 [ 832.307127][T15748] ? __get_vm_area_node+0x125/0x370 [ 832.312434][T15748] kmalloc_node_trace+0x26/0xe0 [ 832.317355][T15748] __get_vm_area_node+0x125/0x370 [ 832.322456][T15748] __vmalloc_node_range+0x36f/0x1320 [ 832.327817][T15748] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 832.333430][T15748] ? mark_lock+0x94/0x320 [ 832.337815][T15748] ? __lock_acquire+0x1336/0x7d80 [ 832.342903][T15748] ? aa_get_newest_label+0xfd/0x5c0 [ 832.348138][T15748] ? free_vm_area+0x50/0x50 [ 832.352678][T15748] ? end_current_label_crit_section+0x170/0x170 [ 832.358968][T15748] ? verify_lock_unused+0x140/0x140 [ 832.364216][T15748] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 832.369797][T15748] __vmalloc+0x7a/0x90 [ 832.373911][T15748] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 832.379489][T15748] bpf_prog_alloc_no_stats+0x46/0x430 [ 832.384903][T15748] bpf_prog_alloc+0x3d/0x1a0 [ 832.389558][T15748] bpf_prog_load+0x6b2/0x1610 [ 832.394282][T15748] ? map_freeze+0x420/0x420 [ 832.398847][T15748] ? __might_fault+0xaa/0x120 [ 832.403595][T15748] ? __lock_acquire+0x7d80/0x7d80 [ 832.408667][T15748] ? file_end_write+0x159/0x250 [ 832.413567][T15748] ? __might_fault+0xaa/0x120 [ 832.418309][T15748] ? __might_fault+0xc6/0x120 [ 832.423018][T15748] ? __might_fault+0xaa/0x120 [ 832.427724][T15748] ? bpf_lsm_bpf+0x9/0x10 [ 832.432099][T15748] ? security_bpf+0x7e/0xa0 [ 832.436638][T15748] __sys_bpf+0x5ba/0x890 [ 832.440920][T15748] ? bpf_link_show_fdinfo+0x390/0x390 [ 832.446345][T15748] ? lock_chain_count+0x20/0x20 [ 832.451244][T15748] __x64_sys_bpf+0x7c/0x90 [ 832.455700][T15748] do_syscall_64+0x55/0xb0 [ 832.460147][T15748] ? clear_bhb_loop+0x40/0x90 [ 832.464862][T15748] ? clear_bhb_loop+0x40/0x90 [ 832.469582][T15748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.475507][T15748] RIP: 0033:0x7fe2bed9e159 [ 832.479949][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.499610][T15748] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 832.508052][T15748] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 832.516054][T15748] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 832.524051][T15748] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 832.532084][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.540084][T15748] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 832.548095][T15748] [ 832.572330][T15748] syz.3.2833: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 832.599265][T15748] CPU: 1 PID: 15748 Comm: syz.3.2833 Not tainted syzkaller #0 [ 832.606813][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.616929][T15748] Call Trace: [ 832.620272][T15748] [ 832.623253][T15748] dump_stack_lvl+0x18c/0x250 [ 832.627999][T15748] ? show_regs_print_info+0x20/0x20 [ 832.633261][T15748] ? load_image+0x420/0x420 [ 832.637827][T15748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 832.644340][T15748] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 832.650916][T15748] warn_alloc+0x246/0x340 [ 832.655303][T15748] ? __get_vm_area_node+0x125/0x370 [ 832.660580][T15748] ? zone_watermark_ok_safe+0x230/0x230 [ 832.666186][T15748] ? rcu_is_watching+0x15/0xb0 [ 832.671023][T15748] ? __get_vm_area_node+0x356/0x370 [ 832.676288][T15748] __vmalloc_node_range+0x394/0x1320 [ 832.681638][T15748] ? mark_lock+0x94/0x320 [ 832.686036][T15748] ? __lock_acquire+0x1336/0x7d80 [ 832.691135][T15748] ? aa_get_newest_label+0xfd/0x5c0 [ 832.696393][T15748] ? free_vm_area+0x50/0x50 [ 832.700963][T15748] ? end_current_label_crit_section+0x170/0x170 [ 832.707271][T15748] ? verify_lock_unused+0x140/0x140 [ 832.712562][T15748] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 832.716413][T15750] netlink: 'syz.0.2834': attribute type 7 has an invalid length. [ 832.718158][T15748] __vmalloc+0x7a/0x90 [ 832.730046][T15748] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 832.733212][T15750] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 832.735631][T15748] bpf_prog_alloc_no_stats+0x46/0x430 [ 832.743781][T15750] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2834'. [ 832.748746][T15748] bpf_prog_alloc+0x3d/0x1a0 [ 832.762740][T15748] bpf_prog_load+0x6b2/0x1610 [ 832.767490][T15748] ? map_freeze+0x420/0x420 [ 832.772055][T15748] ? __might_fault+0xaa/0x120 [ 832.776786][T15748] ? __lock_acquire+0x7d80/0x7d80 [ 832.781865][T15748] ? file_end_write+0x159/0x250 [ 832.786874][T15748] ? __might_fault+0xaa/0x120 [ 832.791604][T15748] ? __might_fault+0xc6/0x120 [ 832.796316][T15748] ? __might_fault+0xaa/0x120 [ 832.801029][T15748] ? bpf_lsm_bpf+0x9/0x10 [ 832.805397][T15748] ? security_bpf+0x7e/0xa0 [ 832.809937][T15748] __sys_bpf+0x5ba/0x890 [ 832.814222][T15748] ? bpf_link_show_fdinfo+0x390/0x390 [ 832.819647][T15748] ? lock_chain_count+0x20/0x20 [ 832.824540][T15748] __x64_sys_bpf+0x7c/0x90 [ 832.828998][T15748] do_syscall_64+0x55/0xb0 [ 832.833456][T15748] ? clear_bhb_loop+0x40/0x90 [ 832.838170][T15748] ? clear_bhb_loop+0x40/0x90 [ 832.842885][T15748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.848807][T15748] RIP: 0033:0x7fe2bed9e159 [ 832.853249][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.872973][T15748] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 832.881420][T15748] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 832.889426][T15748] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 832.897426][T15748] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 832.905434][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.913435][T15748] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 832.921445][T15748] [ 832.966289][T15748] Mem-Info: [ 832.969659][T15748] active_anon:6016 inactive_anon:0 isolated_anon:0 [ 832.969659][T15748] active_file:18403 inactive_file:40157 isolated_file:0 [ 832.969659][T15748] unevictable:768 dirty:189 writeback:0 [ 832.969659][T15748] slab_reclaimable:10386 slab_unreclaimable:94035 [ 832.969659][T15748] mapped:24997 shmem:1361 pagetables:584 [ 832.969659][T15748] sec_pagetables:0 bounce:0 [ 832.969659][T15748] kernel_misc_reclaimable:0 [ 832.969659][T15748] free:1344072 free_pcp:9132 free_cma:0 [ 833.041847][T15748] Node 0 active_anon:23864kB inactive_anon:0kB active_file:73612kB inactive_file:160428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99988kB dirty:756kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12164kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no [ 833.100835][T15748] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 833.138095][T15748] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 833.166145][T15748] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 833.172846][T15748] Node 0 DMA32 free:1467788kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23856kB inactive_anon:0kB active_file:73612kB inactive_file:159604kB unevictable:1536kB writepending:760kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:18032kB local_pcp:16088kB free_cma:0kB [ 833.205316][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 833.214475][T15748] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 833.245626][T15755] net_ratelimit: 4 callbacks suppressed [ 833.245656][T15755] vcan0: mtu less than device minimum [ 833.289237][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 833.307218][T15748] Node 1 Normal free:3893140kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:6404kB free_cma:0kB [ 833.370244][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 833.375538][T15748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 833.425381][T15748] Node 0 DMA32: 191*4kB (UME) 998*8kB (UME) 1600*16kB (UME) 837*32kB (UME) 363*64kB (UME) 152*128kB (UME) 126*256kB (UME) 59*512kB (UM) 27*1024kB (UME) 12*2048kB (M) 305*4096kB (UM) = 1467788kB [ 833.484870][T15748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 833.530048][T15748] Node 1 Normal: 205*4kB (UME) 28*8kB (UME) 36*16kB (UME) 64*32kB (UME) 25*64kB (UME) 10*128kB (UME) 2*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3893140kB [ 833.554467][T15748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 833.564635][T15748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 833.604615][T15748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 833.648056][T15748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 833.722554][T15748] 59923 total pagecache pages [ 833.727338][T15748] 0 pages in swap cache [ 833.761598][T15748] Free swap = 124996kB [ 833.765853][T15748] Total swap = 124996kB [ 833.799487][T15748] 2097051 pages RAM [ 833.810312][T15748] 0 pages HighMem/MovableOnly [ 833.828029][T15748] 416960 pages reserved [ 833.838162][T15748] 0 pages cma reserved [ 834.049271][T15765] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2840'. [ 834.069473][T15765] netlink: zone id is out of range [ 834.074714][T15765] netlink: zone id is out of range [ 834.083422][T15765] netlink: zone id is out of range [ 834.088617][T15765] netlink: zone id is out of range [ 834.095945][T15765] netlink: zone id is out of range [ 834.101605][T15765] netlink: zone id is out of range [ 834.109883][T15765] netlink: zone id is out of range [ 834.115432][T15765] netlink: zone id is out of range [ 834.121572][T15765] netlink: zone id is out of range [ 834.337908][T15777] netlink: 'syz.2.2843': attribute type 10 has an invalid length. [ 834.356920][T15777] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2843'. [ 834.511191][T15781] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.2844'. [ 835.023138][T15789] FAULT_INJECTION: forcing a failure. [ 835.023138][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.069209][T15789] CPU: 0 PID: 15789 Comm: syz.3.2847 Not tainted syzkaller #0 [ 835.076775][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.086881][T15789] Call Trace: [ 835.090207][T15789] [ 835.093182][T15789] dump_stack_lvl+0x18c/0x250 [ 835.097931][T15789] ? show_regs_print_info+0x20/0x20 [ 835.103186][T15789] ? load_image+0x420/0x420 [ 835.107762][T15789] should_fail_ex+0x394/0x4c0 [ 835.112510][T15789] _copy_from_iter+0x1cd/0x1290 [ 835.117430][T15789] ? copyout_mc+0x70/0x70 [ 835.121822][T15789] ? __virt_addr_valid+0x10c/0x380 [ 835.127000][T15789] ? __virt_addr_valid+0x10c/0x380 [ 835.132169][T15789] ? __virt_addr_valid+0x10c/0x380 [ 835.137341][T15789] ? __check_object_size+0x4fc/0xa40 [ 835.142732][T15789] kcm_sendmsg+0xddc/0x27b0 [ 835.147612][T15789] ? kcm_getsockopt+0x280/0x280 [ 835.152549][T15789] ? security_socket_sendmsg+0x5a/0xa0 [ 835.158087][T15789] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 835.163435][T15789] ? security_socket_sendmsg+0x80/0xa0 [ 835.168943][T15789] ? kcm_getsockopt+0x280/0x280 [ 835.173850][T15789] ____sys_sendmsg+0x61b/0x980 [ 835.178712][T15789] ? __asan_memset+0x22/0x40 [ 835.183361][T15789] ? __sys_sendmsg_sock+0x30/0x30 [ 835.188432][T15789] ? __import_iovec+0x5f2/0x850 [ 835.193357][T15789] ? import_iovec+0x73/0xa0 [ 835.197924][T15789] ___sys_sendmsg+0x2a6/0x360 [ 835.202668][T15789] ? __sys_sendmsg+0x2b0/0x2b0 [ 835.207544][T15789] __se_sys_sendmsg+0x1d0/0x2c0 [ 835.212455][T15789] ? __x64_sys_sendmsg+0x80/0x80 [ 835.217466][T15789] ? syscall_enter_from_user_mode+0x2e/0x80 [ 835.223430][T15789] do_syscall_64+0x55/0xb0 [ 835.227897][T15789] ? clear_bhb_loop+0x40/0x90 [ 835.232623][T15789] ? clear_bhb_loop+0x40/0x90 [ 835.237357][T15789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.243307][T15789] RIP: 0033:0x7fe2bed9e159 [ 835.247761][T15789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.267413][T15789] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.275879][T15789] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 835.283896][T15789] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 835.291910][T15789] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 835.299924][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.307939][T15789] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 835.315980][T15789] [ 835.685696][T15798] netlink: 'syz.0.2859': attribute type 10 has an invalid length. [ 835.700980][T15798] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2859'. [ 836.720551][T15812] netlink: 'syz.3.2855': attribute type 21 has an invalid length. [ 836.741619][T15812] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2855'. [ 836.861274][T15822] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2856'. [ 837.581418][T15837] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 837.613922][T15837] hsr0: entered promiscuous mode [ 837.623580][T15837] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 837.724039][T15837] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 838.714973][T15855] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2866'. [ 838.782406][T15846] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 838.805745][T15855] net_ratelimit: 7 callbacks suppressed [ 838.805780][T15855] netlink: zone id is out of range [ 838.824161][T15855] netlink: zone id is out of range [ 838.829595][T15846] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2865'. [ 838.830907][T15846] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 838.865953][T15855] netlink: zone id is out of range [ 838.875615][T15855] netlink: zone id is out of range [ 838.885784][T15855] netlink: zone id is out of range [ 838.900471][T15855] netlink: zone id is out of range [ 838.918232][T15855] netlink: zone id is out of range [ 838.937655][T15855] netlink: zone id is out of range [ 838.961864][T15855] netlink: zone id is out of range [ 839.247725][T15861] netlink: 'syz.3.2868': attribute type 29 has an invalid length. [ 839.300942][T15861] netlink: 'syz.3.2868': attribute type 29 has an invalid length. [ 839.339228][T15864] netlink: 'syz.3.2868': attribute type 29 has an invalid length. [ 839.348207][T15866] netlink: 'syz.3.2868': attribute type 29 has an invalid length. [ 839.401748][T15861] netlink: 'syz.3.2868': attribute type 29 has an invalid length. [ 840.463345][T15896] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2879'. [ 841.467731][T15917] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2888'. [ 841.772031][T14617] Bluetooth: hci2: command 0x0406 tx timeout [ 842.751608][T15941] netlink: 'syz.3.2896': attribute type 2 has an invalid length. [ 843.395352][T15954] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2900'. [ 843.500616][T15961] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 [ 845.769107][T16001] netlink: 'syz.3.2911': attribute type 10 has an invalid length. [ 846.580444][T16001] geneve0: entered promiscuous mode [ 846.606439][T16001] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 847.143547][T16018] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2916'. [ 847.162047][T16018] net_ratelimit: 44 callbacks suppressed [ 847.162086][T16018] netlink: zone id is out of range [ 847.194177][T16018] netlink: zone id is out of range [ 847.226429][T16018] netlink: zone id is out of range [ 847.240898][T16022] netlink: 'syz.2.2919': attribute type 7 has an invalid length. [ 847.255838][T16018] netlink: zone id is out of range [ 847.263964][T16018] netlink: zone id is out of range [ 847.276971][T16021] netlink: 'syz.2.2919': attribute type 7 has an invalid length. [ 847.286519][T16018] netlink: zone id is out of range [ 847.303192][T16018] netlink: zone id is out of range [ 847.309149][T16018] netlink: zone id is out of range [ 847.319294][T16018] netlink: zone id is out of range [ 847.327031][T16018] netlink: zone id is out of range [ 847.541421][T16024] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2921'. [ 847.641861][T16024] netlink: 'syz.0.2921': attribute type 21 has an invalid length. [ 847.666281][T16024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2921'. [ 847.720067][T16024] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2921'. [ 848.704227][T16048] FAULT_INJECTION: forcing a failure. [ 848.704227][T16048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.726121][T16048] CPU: 1 PID: 16048 Comm: syz.3.2928 Not tainted syzkaller #0 [ 848.733690][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.743800][T16048] Call Trace: [ 848.747105][T16048] [ 848.750062][T16048] dump_stack_lvl+0x18c/0x250 [ 848.754777][T16048] ? show_regs_print_info+0x20/0x20 [ 848.760034][T16048] ? load_image+0x420/0x420 [ 848.764572][T16048] ? should_fail_ex+0x319/0x4c0 [ 848.769458][T16048] should_fail_ex+0x394/0x4c0 [ 848.774174][T16048] _copy_from_iter+0x1cd/0x1290 [ 848.779070][T16048] ? copyout_mc+0x70/0x70 [ 848.783439][T16048] ? __virt_addr_valid+0x10c/0x380 [ 848.788580][T16048] ? __virt_addr_valid+0x10c/0x380 [ 848.793718][T16048] ? __virt_addr_valid+0x10c/0x380 [ 848.798865][T16048] ? __check_object_size+0x4fc/0xa40 [ 848.804177][T16048] kcm_sendmsg+0xddc/0x27b0 [ 848.808743][T16048] ? kcm_getsockopt+0x280/0x280 [ 848.813633][T16048] ? audit_tree_destroy_watch+0x20/0x20 [ 848.819214][T16048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 848.824527][T16048] ? security_socket_sendmsg+0x80/0xa0 [ 848.830019][T16048] ? kcm_getsockopt+0x280/0x280 [ 848.834905][T16048] ____sys_sendmsg+0x61b/0x980 [ 848.839699][T16048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 848.845899][T16048] ? __asan_memset+0x22/0x40 [ 848.850521][T16048] ? __sys_sendmsg_sock+0x30/0x30 [ 848.855570][T16048] ? __import_iovec+0x5f2/0x850 [ 848.860474][T16048] ? import_iovec+0x73/0xa0 [ 848.865023][T16048] ___sys_sendmsg+0x2a6/0x360 [ 848.869771][T16048] ? __sys_sendmsg+0x2b0/0x2b0 [ 848.874610][T16048] __se_sys_sendmsg+0x1d0/0x2c0 [ 848.879494][T16048] ? __x64_sys_sendmsg+0x80/0x80 [ 848.884475][T16048] ? syscall_enter_from_user_mode+0x2e/0x80 [ 848.890404][T16048] do_syscall_64+0x55/0xb0 [ 848.894858][T16048] ? clear_bhb_loop+0x40/0x90 [ 848.899565][T16048] ? clear_bhb_loop+0x40/0x90 [ 848.904282][T16048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.910206][T16048] RIP: 0033:0x7fe2bed9e159 [ 848.914649][T16048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.934286][T16048] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.942732][T16048] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 848.950824][T16048] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 848.958824][T16048] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.966909][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.974924][T16048] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 848.982943][T16048] [ 849.727733][T16082] netlink: 'syz.2.2937': attribute type 1 has an invalid length. [ 849.738214][T16082] netlink: 'syz.2.2937': attribute type 3 has an invalid length. [ 849.747465][T16082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2937'. [ 850.204583][T16079] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2937'. [ 851.192355][T16114] netlink: 195792 bytes leftover after parsing attributes in process `syz.3.2950'. [ 851.477313][T16130] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.2953'. [ 851.952840][T16133] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2955'. [ 852.040360][T16139] netlink: 'syz.1.2955': attribute type 21 has an invalid length. [ 852.048346][T16139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2955'. [ 852.164198][T16133] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2955'. [ 852.900586][T16148] delete_channel: no stack [ 852.905391][T16148] delete_channel: no stack [ 852.945758][T16148] netlink: 'syz.3.2960': attribute type 25 has an invalid length. [ 853.031929][T16148] netlink: 'syz.3.2960': attribute type 9 has an invalid length. [ 853.111412][T16148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2960'. [ 855.084796][T16184] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2970'. [ 855.445251][T16190] netlink: 'syz.2.2970': attribute type 21 has an invalid length. [ 855.454238][T16190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2970'. [ 855.547716][T16184] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.2970'. [ 856.457840][T16221] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2982'. [ 856.486534][T16221] net_ratelimit: 4 callbacks suppressed [ 856.486568][T16221] netlink: zone id is out of range [ 856.520910][T16221] netlink: zone id is out of range [ 856.550362][T16221] netlink: zone id is out of range [ 856.555801][T16221] netlink: zone id is out of range [ 856.585628][T16221] netlink: zone id is out of range [ 856.593006][T16221] netlink: zone id is out of range [ 856.598421][T16221] netlink: zone id is out of range [ 856.620417][T16221] netlink: zone id is out of range [ 856.625905][T16221] netlink: zone id is out of range [ 856.674805][T16221] netlink: zone id is out of range [ 856.987267][T16227] vcan0: entered allmulticast mode [ 857.913138][T16253] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2993'. [ 858.220571][T16263] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2996'. [ 858.333033][T16266] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.2997'. [ 858.931276][T16275] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2999'. [ 858.990593][T16275] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2999'. [ 859.044458][T16275] bond0: (slave bond_slave_0): Releasing backup interface [ 859.104880][T16284] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3001'. [ 860.499767][T16307] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3010'. [ 860.591443][T16310] FAULT_INJECTION: forcing a failure. [ 860.591443][T16310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.625216][T16310] CPU: 1 PID: 16310 Comm: syz.1.3008 Not tainted syzkaller #0 [ 860.632782][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.642894][T16310] Call Trace: [ 860.646225][T16310] [ 860.649201][T16310] dump_stack_lvl+0x18c/0x250 [ 860.653947][T16310] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.660168][T16310] ? show_regs_print_info+0x20/0x20 [ 860.665440][T16310] ? load_image+0x420/0x420 [ 860.670024][T16310] should_fail_ex+0x394/0x4c0 [ 860.674772][T16310] _copy_from_iter+0x1cd/0x1290 [ 860.679702][T16310] ? copyout_mc+0x70/0x70 [ 860.684090][T16310] ? __virt_addr_valid+0x10c/0x380 [ 860.689256][T16310] ? __virt_addr_valid+0x10c/0x380 [ 860.694426][T16310] ? __virt_addr_valid+0x10c/0x380 [ 860.699603][T16310] ? __check_object_size+0x4fc/0xa40 [ 860.704944][T16310] kcm_sendmsg+0xddc/0x27b0 [ 860.709545][T16310] ? kcm_getsockopt+0x280/0x280 [ 860.714457][T16310] ? apparmor_socket_sendmsg+0x8e/0x330 [ 860.720059][T16310] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 860.725405][T16310] ? security_socket_sendmsg+0x80/0xa0 [ 860.730923][T16310] ? kcm_getsockopt+0x280/0x280 [ 860.735829][T16310] ____sys_sendmsg+0x61b/0x980 [ 860.740634][T16310] ? __asan_memset+0x22/0x40 [ 860.745273][T16310] ? __sys_sendmsg_sock+0x30/0x30 [ 860.750337][T16310] ? __import_iovec+0x5f2/0x850 [ 860.755236][T16310] ? import_iovec+0x73/0xa0 [ 860.759829][T16310] ___sys_sendmsg+0x2a6/0x360 [ 860.764598][T16310] ? __sys_sendmsg+0x2b0/0x2b0 [ 860.769440][T16310] ? ktime_get+0x7f/0x280 [ 860.773841][T16310] __se_sys_sendmsg+0x1d0/0x2c0 [ 860.778736][T16310] ? perf_trace_preemptirq_template+0x269/0x330 [ 860.785059][T16310] ? __x64_sys_sendmsg+0x80/0x80 [ 860.790045][T16310] ? lockdep_hardirqs_on+0x98/0x150 [ 860.795282][T16310] do_syscall_64+0x55/0xb0 [ 860.799727][T16310] ? clear_bhb_loop+0x40/0x90 [ 860.804434][T16310] ? clear_bhb_loop+0x40/0x90 [ 860.809147][T16310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.815067][T16310] RIP: 0033:0x7ff87cb9e159 [ 860.819517][T16310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.839167][T16310] RSP: 002b:00007ff87da4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.847613][T16310] RAX: ffffffffffffffda RBX: 00007ff87ce26090 RCX: 00007ff87cb9e159 [ 860.855615][T16310] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 860.863612][T16310] RBP: 00007ff87da4d090 R08: 0000000000000000 R09: 0000000000000000 [ 860.871609][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.879611][T16310] R13: 00007ff87ce26128 R14: 00007ff87ce26090 R15: 00007fff8fbbc5b8 [ 860.887622][T16310] [ 861.167134][T16322] netlink: 'syz.2.3014': attribute type 10 has an invalid length. [ 861.232209][T16322] team0: Port device netdevsim0 added [ 861.879273][T16339] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3018'. [ 862.142661][T16333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3016'. [ 862.165028][T16333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3016'. [ 862.614784][T16360] net_ratelimit: 18 callbacks suppressed [ 862.614826][T16360] Dead loop on virtual device ip6_vti0, fix it urgently! [ 862.821907][T16367] FAULT_INJECTION: forcing a failure. [ 862.821907][T16367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.836179][T16367] CPU: 0 PID: 16367 Comm: syz.3.3029 Not tainted syzkaller #0 [ 862.843707][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.853816][T16367] Call Trace: [ 862.857148][T16367] [ 862.860136][T16367] dump_stack_lvl+0x18c/0x250 [ 862.864872][T16367] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 862.871085][T16367] ? show_regs_print_info+0x20/0x20 [ 862.876344][T16367] ? load_image+0x420/0x420 [ 862.880919][T16367] should_fail_ex+0x394/0x4c0 [ 862.885665][T16367] _copy_from_user+0x2f/0xe0 [ 862.890312][T16367] __sys_bpf+0x23e/0x890 [ 862.894608][T16367] ? bpf_link_show_fdinfo+0x390/0x390 [ 862.900051][T16367] ? lock_chain_count+0x20/0x20 [ 862.904959][T16367] __x64_sys_bpf+0x7c/0x90 [ 862.909412][T16367] do_syscall_64+0x55/0xb0 [ 862.913859][T16367] ? clear_bhb_loop+0x40/0x90 [ 862.918566][T16367] ? clear_bhb_loop+0x40/0x90 [ 862.923273][T16367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.929200][T16367] RIP: 0033:0x7fe2bed9e159 [ 862.933639][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.953271][T16367] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 862.961713][T16367] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 862.969730][T16367] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 862.977729][T16367] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 862.985728][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.993730][T16367] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 863.001739][T16367] [ 864.247692][T16406] __nla_validate_parse: 32 callbacks suppressed [ 864.247727][T16406] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3040'. [ 864.284741][T16406] netlink: zone id is out of range [ 864.294661][T16406] netlink: zone id is out of range [ 864.306565][T16406] netlink: zone id is out of range [ 864.318389][T16406] netlink: zone id is out of range [ 864.326212][T16406] netlink: zone id is out of range [ 864.333753][T16406] netlink: zone id is out of range [ 864.339768][T16406] netlink: zone id is out of range [ 864.345284][T16406] netlink: zone id is out of range [ 864.351615][T16406] netlink: zone id is out of range [ 864.737365][T16429] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3048'. [ 864.790967][T16429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3048'. [ 864.831896][T16429] bond0: (slave bond_slave_0): Releasing backup interface [ 864.859803][T16435] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3050'. [ 865.013159][T16438] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3050'. [ 865.038754][T16438] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 865.056381][T16438] CPU: 1 PID: 16438 Comm: syz.0.3050 Not tainted syzkaller #0 [ 865.063959][T16438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.074069][T16438] Call Trace: [ 865.077439][T16438] [ 865.080412][T16438] dump_stack_lvl+0x18c/0x250 [ 865.085150][T16438] ? show_regs_print_info+0x20/0x20 [ 865.090406][T16438] ? load_image+0x420/0x420 [ 865.094992][T16438] sysfs_warn_dup+0x8e/0xa0 [ 865.099567][T16438] sysfs_do_create_link_sd+0xc0/0x110 [ 865.105045][T16438] device_add_class_symlinks+0x1cf/0x240 [ 865.110735][T16438] device_add+0x4f9/0xc40 [ 865.115112][T16438] wiphy_register+0x1d99/0x2ac0 [ 865.120036][T16438] ? cfg80211_event_work+0x40/0x40 [ 865.125201][T16438] ? minstrel_ht_alloc+0x88a/0x990 [ 865.130374][T16438] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 865.136515][T16438] ieee80211_register_hw+0x2dd8/0x3b30 [ 865.142055][T16438] ? ieee80211_register_hw+0xfb1/0x3b30 [ 865.147682][T16438] ? ieee80211_tasklet_handler+0x20/0x20 [ 865.153372][T16438] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 865.159335][T16438] ? __debug_object_init+0xec/0x450 [ 865.164608][T16438] ? __asan_memset+0x22/0x40 [ 865.169271][T16438] ? __hrtimer_init+0x189/0x270 [ 865.174180][T16438] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 865.179983][T16438] ? mac80211_hwsim_free+0x220/0x220 [ 865.185333][T16438] ? rcu_is_watching+0x15/0xb0 [ 865.190158][T16438] ? kstrndup+0xbd/0x140 [ 865.194477][T16438] hwsim_new_radio_nl+0xdad/0x1a70 [ 865.199655][T16438] ? __nla_validate+0x50/0x50 [ 865.204408][T16438] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 865.210796][T16438] ? __nla_parse+0x40/0x50 [ 865.215255][T16438] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 865.221627][T16438] genl_family_rcv_msg_doit+0x21a/0x310 [ 865.227217][T16438] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 865.233152][T16438] ? bpf_lsm_capable+0x9/0x10 [ 865.237878][T16438] ? security_capable+0x89/0xb0 [ 865.242767][T16438] genl_rcv_msg+0x611/0x7a0 [ 865.247312][T16438] ? genl_bind+0x360/0x360 [ 865.251759][T16438] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 865.258143][T16438] ? perf_trace_lock+0xfc/0x3b0 [ 865.263032][T16438] netlink_rcv_skb+0x235/0x4c0 [ 865.267826][T16438] ? genl_bind+0x360/0x360 [ 865.272299][T16438] ? netlink_ack+0x1160/0x1160 [ 865.277105][T16438] ? __lock_acquire+0x7d80/0x7d80 [ 865.282169][T16438] ? down_read+0x1ac/0x2e0 [ 865.286644][T16438] genl_rcv+0x28/0x40 [ 865.290657][T16438] netlink_unicast+0x7b1/0x930 [ 865.295458][T16438] netlink_sendmsg+0x8d0/0xbf0 [ 865.300286][T16438] ? netlink_getsockopt+0x590/0x590 [ 865.305533][T16438] ? apparmor_socket_sendmsg+0x8e/0x330 [ 865.311143][T16438] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 865.316463][T16438] ? security_socket_sendmsg+0x80/0xa0 [ 865.321953][T16438] ? netlink_getsockopt+0x590/0x590 [ 865.327220][T16438] ____sys_sendmsg+0x61b/0x980 [ 865.332049][T16438] ? __asan_memset+0x22/0x40 [ 865.336692][T16438] ? __sys_sendmsg_sock+0x30/0x30 [ 865.341756][T16438] ? __import_iovec+0x5f2/0x850 [ 865.346656][T16438] ? import_iovec+0x73/0xa0 [ 865.351208][T16438] ___sys_sendmsg+0x2a6/0x360 [ 865.355950][T16438] ? __sys_sendmsg+0x2b0/0x2b0 [ 865.360801][T16438] __se_sys_sendmsg+0x1d0/0x2c0 [ 865.365706][T16438] ? __x64_sys_sendmsg+0x80/0x80 [ 865.370713][T16438] ? lockdep_hardirqs_on+0x98/0x150 [ 865.375953][T16438] do_syscall_64+0x55/0xb0 [ 865.380406][T16438] ? clear_bhb_loop+0x40/0x90 [ 865.385118][T16438] ? clear_bhb_loop+0x40/0x90 [ 865.389824][T16438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.395748][T16438] RIP: 0033:0x7f0a18b9e159 [ 865.400193][T16438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.419848][T16438] RSP: 002b:00007f0a19992028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.428312][T16438] RAX: ffffffffffffffda RBX: 00007f0a18e26270 RCX: 00007f0a18b9e159 [ 865.436348][T16438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 865.444348][T16438] RBP: 00007f0a18c3503b R08: 0000000000000000 R09: 0000000000000000 [ 865.452352][T16438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.460354][T16438] R13: 00007f0a18e26308 R14: 00007f0a18e26270 R15: 00007ffd144b3208 [ 865.468374][T16438] [ 865.873899][T16447] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3055'. [ 866.964063][T16484] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3065'. [ 869.015119][T16508] delete_channel: no stack [ 869.327204][T16549] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3087'. [ 869.370336][T16549] net_ratelimit: 6 callbacks suppressed [ 869.370372][T16549] netlink: zone id is out of range [ 869.400290][T16549] netlink: zone id is out of range [ 869.429174][T16549] netlink: zone id is out of range [ 869.450787][T16549] netlink: zone id is out of range [ 869.465940][T16549] netlink: zone id is out of range [ 869.491173][T16549] netlink: zone id is out of range [ 869.506381][T16549] netlink: zone id is out of range [ 869.530489][T16549] netlink: zone id is out of range [ 869.571598][T16549] netlink: zone id is out of range [ 869.591984][T16549] netlink: zone id is out of range [ 870.404949][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.419683][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.346758][T16565] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.3093'. [ 872.616454][T16576] netlink: 'syz.2.3096': attribute type 2 has an invalid length. [ 872.637190][T16576] netlink: 'syz.2.3096': attribute type 8 has an invalid length. [ 872.656015][T16576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3096'. [ 873.017000][T16598] FAULT_INJECTION: forcing a failure. [ 873.017000][T16598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.044393][T16600] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3101'. [ 873.056998][T16598] CPU: 1 PID: 16598 Comm: syz.2.3103 Not tainted syzkaller #0 [ 873.064538][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 873.074643][T16598] Call Trace: [ 873.077968][T16598] [ 873.080946][T16598] dump_stack_lvl+0x18c/0x250 [ 873.085681][T16598] ? show_regs_print_info+0x20/0x20 [ 873.090944][T16598] ? load_image+0x420/0x420 [ 873.095513][T16598] ? __might_fault+0xaa/0x120 [ 873.100264][T16598] ? __lock_acquire+0x7d80/0x7d80 [ 873.105353][T16598] should_fail_ex+0x394/0x4c0 [ 873.110095][T16598] _copy_from_iter+0x1cd/0x1290 [ 873.115027][T16598] ? copyout_mc+0x70/0x70 [ 873.119415][T16598] ? __virt_addr_valid+0x10c/0x380 [ 873.124579][T16598] ? __virt_addr_valid+0x10c/0x380 [ 873.129748][T16598] ? __virt_addr_valid+0x10c/0x380 [ 873.134917][T16598] ? __check_object_size+0x4fc/0xa40 [ 873.140255][T16598] kcm_sendmsg+0xddc/0x27b0 [ 873.144852][T16598] ? kcm_getsockopt+0x280/0x280 [ 873.149755][T16598] ? apparmor_socket_sendmsg+0x8e/0x330 [ 873.155361][T16598] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 873.160707][T16598] ? security_socket_sendmsg+0x80/0xa0 [ 873.166216][T16598] ? kcm_getsockopt+0x280/0x280 [ 873.171142][T16598] ____sys_sendmsg+0x61b/0x980 [ 873.175961][T16598] ? __asan_memset+0x22/0x40 [ 873.180613][T16598] ? __sys_sendmsg_sock+0x30/0x30 [ 873.185748][T16598] ? __import_iovec+0x5f2/0x850 [ 873.190668][T16598] ? import_iovec+0x73/0xa0 [ 873.195237][T16598] ___sys_sendmsg+0x2a6/0x360 [ 873.199971][T16598] ? __sys_sendmsg+0x2b0/0x2b0 [ 873.204847][T16598] __se_sys_sendmsg+0x1d0/0x2c0 [ 873.209756][T16598] ? __x64_sys_sendmsg+0x80/0x80 [ 873.214762][T16598] ? syscall_enter_from_user_mode+0x2e/0x80 [ 873.220723][T16598] do_syscall_64+0x55/0xb0 [ 873.225189][T16598] ? clear_bhb_loop+0x40/0x90 [ 873.229961][T16598] ? clear_bhb_loop+0x40/0x90 [ 873.234701][T16598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.240651][T16598] RIP: 0033:0x7fd7dad9e159 [ 873.245114][T16598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.264777][T16598] RSP: 002b:00007fd7dbcdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.273254][T16598] RAX: ffffffffffffffda RBX: 00007fd7db026090 RCX: 00007fd7dad9e159 [ 873.281277][T16598] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 873.289306][T16598] RBP: 00007fd7dbcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 873.297327][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 873.305356][T16598] R13: 00007fd7db026128 R14: 00007fd7db026090 R15: 00007fff891b5d58 [ 873.313405][T16598] [ 873.714042][T16615] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3106'. [ 873.728470][T16615] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3106'. [ 873.756722][T16610] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3106'. [ 873.782599][T16615] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3106'. [ 873.981896][T16610] syzkaller0: entered promiscuous mode [ 873.997426][T16610] syzkaller0: entered allmulticast mode [ 878.261515][T16668] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3126'. [ 878.300574][T16668] net_ratelimit: 4 callbacks suppressed [ 878.300592][T16668] netlink: zone id is out of range [ 878.341371][T16668] netlink: zone id is out of range [ 878.352402][T16668] netlink: zone id is out of range [ 878.367896][T16668] netlink: zone id is out of range [ 878.394563][T16668] netlink: zone id is out of range [ 878.419044][T16668] netlink: zone id is out of range [ 878.424259][T16668] netlink: zone id is out of range [ 878.448422][T16668] netlink: zone id is out of range [ 878.460232][T16668] netlink: zone id is out of range [ 878.472519][T16668] netlink: zone id is out of range [ 879.457000][T16692] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.3134'. [ 880.834014][T16718] netlink: 'syz.0.3144': attribute type 11 has an invalid length. [ 880.932148][T16722] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3141'. [ 882.729183][T14617] Bluetooth: hci1: command 0x0406 tx timeout [ 883.412294][T16770] net_ratelimit: 134 callbacks suppressed [ 883.412315][T16770] vcan0: mtu less than device minimum [ 886.215155][T16809] vcan0: mtu less than device minimum [ 886.714558][T16823] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3173'. [ 886.822546][T16823] netlink: zone id is out of range [ 886.879310][T16823] netlink: zone id is out of range [ 886.910436][T16823] netlink: zone id is out of range [ 886.915657][T16823] netlink: zone id is out of range [ 886.971024][T16823] netlink: zone id is out of range [ 886.998822][T16823] netlink: zone id is out of range [ 887.069377][T16823] netlink: zone id is out of range [ 887.094732][T16823] netlink: zone id is out of range [ 887.373629][T16830] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3180'. [ 888.072595][T16841] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3184'. [ 888.120205][T16842] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3184'. [ 889.479451][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 890.089352][T16866] net_ratelimit: 7 callbacks suppressed [ 890.089371][T16866] vcan0: mtu less than device minimum [ 891.387123][T16895] netlink: 'syz.1.3204': attribute type 10 has an invalid length. [ 891.520593][T14617] Bluetooth: hci1: command 0x0406 tx timeout [ 891.723736][T16895] team0: Port device geneve1 added [ 891.805685][T16894] FAULT_INJECTION: forcing a failure. [ 891.805685][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 891.849080][T16894] CPU: 0 PID: 16894 Comm: syz.3.3202 Not tainted syzkaller #0 [ 891.856640][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.866749][T16894] Call Trace: [ 891.870084][T16894] [ 891.873060][T16894] dump_stack_lvl+0x18c/0x250 [ 891.877794][T16894] ? show_regs_print_info+0x20/0x20 [ 891.883088][T16894] ? load_image+0x420/0x420 [ 891.887625][T16894] ? __might_sleep+0xe0/0xe0 [ 891.892344][T16894] ? __lock_acquire+0x7d80/0x7d80 [ 891.897403][T16894] should_fail_ex+0x394/0x4c0 [ 891.902125][T16894] should_failslab+0x9/0x20 [ 891.906662][T16894] slab_pre_alloc_hook+0x59/0x300 [ 891.911732][T16894] kmem_cache_alloc+0x5a/0x2c0 [ 891.916618][T16894] ? ptlock_alloc+0x20/0x70 [ 891.921158][T16894] ptlock_alloc+0x20/0x70 [ 891.925546][T16894] pte_alloc_one+0xcc/0x540 [ 891.930096][T16894] ? pfn_modify_allowed+0x560/0x560 [ 891.935340][T16894] ? lockdep_hardirqs_on+0x98/0x150 [ 891.940578][T16894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 891.946790][T16894] __pte_alloc+0x22/0x2a0 [ 891.951168][T16894] handle_mm_fault+0x3dc6/0x4a50 [ 891.956142][T16894] ? handle_mm_fault+0xe6/0x4a50 [ 891.961121][T16894] ? numa_migrate_prep+0x350/0x350 [ 891.966269][T16894] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 891.971598][T16894] do_user_addr_fault+0x736/0x12d0 [ 891.976760][T16894] exc_page_fault+0x64/0x100 [ 891.981387][T16894] asm_exc_page_fault+0x26/0x30 [ 891.986270][T16894] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 891.992112][T16894] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 892.011751][T16894] RSP: 0018:ffffc900036f7ca0 EFLAGS: 00050206 [ 892.017880][T16894] RAX: ffffffff8433cd01 RBX: 00000000001ff003 RCX: 0000000000000603 [ 892.025877][T16894] RDX: 0000000000000001 RSI: 0000200000200000 RDI: ffff88804b9fea00 [ 892.033875][T16894] RBP: 0000200000001601 R08: 0000000000000002 R09: 0000000000000003 [ 892.041872][T16894] R10: dffffc0000000000 R11: ffffed100973fe00 R12: 0000200000200603 [ 892.049873][T16894] R13: ffffc900036f7dd8 R14: ffff88804b800000 R15: 0000200000001600 [ 892.057876][T16894] ? rcuref_put_slowpath+0x121/0x150 [ 892.063204][T16894] _copy_from_user+0x8b/0xe0 [ 892.067824][T16894] vmemdup_user+0xac/0x1e0 [ 892.072274][T16894] map_lookup_and_delete_elem+0x3a3/0xad0 [ 892.078026][T16894] ? bpf_lsm_bpf+0x9/0x10 [ 892.082393][T16894] __sys_bpf+0x528/0x890 [ 892.086666][T16894] ? bpf_link_show_fdinfo+0x390/0x390 [ 892.092074][T16894] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 892.098274][T16894] __x64_sys_bpf+0x7c/0x90 [ 892.102724][T16894] do_syscall_64+0x55/0xb0 [ 892.107170][T16894] ? clear_bhb_loop+0x40/0x90 [ 892.111879][T16894] ? clear_bhb_loop+0x40/0x90 [ 892.116584][T16894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.122520][T16894] RIP: 0033:0x7fe2bed9e159 [ 892.126958][T16894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.146590][T16894] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 892.155047][T16894] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 892.163062][T16894] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 892.171066][T16894] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 892.179065][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.187058][T16894] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 892.195072][T16894] [ 892.284333][T16906] vcan0: mtu less than device minimum [ 892.393641][T16908] vcan0: mtu less than device minimum [ 893.415838][T16928] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3214'. [ 893.510709][T16928] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3214'. [ 893.769162][T14617] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 894.221753][T16942] vcan0: mtu less than device minimum [ 894.307692][T16944] vcan0: mtu less than device minimum [ 894.934940][T16959] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3225'. [ 894.981607][T16959] netlink: 'syz.0.3225': attribute type 2 has an invalid length. [ 895.115153][T16955] netlink: 'syz.0.3225': attribute type 12 has an invalid length. [ 895.148224][T16955] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.3225'. [ 895.515945][T16963] Dead loop on virtual device ip6_vti0, fix it urgently! [ 895.621878][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 895.853697][ T51] Bluetooth: hci0: command tx timeout [ 895.959001][T16970] vcan0: mtu less than device minimum [ 896.292853][T16982] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.3232'. [ 896.871796][T16997] netlink: 'syz.2.3237': attribute type 3 has an invalid length. [ 896.892107][T17000] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3238'. [ 896.909888][T16997] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3237'. [ 896.919307][T17000] netlink: 'syz.1.3238': attribute type 2 has an invalid length. [ 897.169746][T17000] netlink: 'syz.1.3238': attribute type 12 has an invalid length. [ 897.184512][T17000] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.3238'. [ 897.548374][T17012] vcan0: mtu less than device minimum [ 897.679118][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 899.018674][T17042] netlink: 'syz.0.3252': attribute type 9 has an invalid length. [ 899.067282][T17042] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3252'. [ 899.330255][T17047] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3262'. [ 899.358031][T17047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3262'. [ 899.433903][T17049] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3254'. [ 899.502223][T17049] netlink: 'syz.3.3254': attribute type 2 has an invalid length. [ 899.576967][T17049] netlink: 'syz.3.3254': attribute type 12 has an invalid length. [ 899.596274][T17049] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.3254'. [ 900.586717][T17069] sctp: [Deprecated]: syz.1.3261 (pid 17069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.586717][T17069] Use struct sctp_sack_info instead [ 900.666009][T17069] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3261'. [ 902.007531][T17097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 902.022800][T17099] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3270'. [ 902.039086][T17099] netlink: 'syz.2.3270': attribute type 2 has an invalid length. [ 902.122821][T17099] netlink: 'syz.2.3270': attribute type 12 has an invalid length. [ 902.133780][T17099] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.3270'. [ 903.199263][T14617] Bluetooth: hci0: command 0x0406 tx timeout [ 903.889087][T17151] FAULT_INJECTION: forcing a failure. [ 903.889087][T17151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.926833][T17151] CPU: 0 PID: 17151 Comm: syz.3.3289 Not tainted syzkaller #0 [ 903.934394][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.944505][T17151] Call Trace: [ 903.947826][T17151] [ 903.950794][T17151] dump_stack_lvl+0x18c/0x250 [ 903.955535][T17151] ? show_regs_print_info+0x20/0x20 [ 903.960796][T17151] ? load_image+0x420/0x420 [ 903.965350][T17151] ? __might_fault+0xaa/0x120 [ 903.970074][T17151] ? __lock_acquire+0x7d80/0x7d80 [ 903.975181][T17151] should_fail_ex+0x394/0x4c0 [ 903.979921][T17151] _copy_from_iter+0x1cd/0x1290 [ 903.984854][T17151] ? copyout_mc+0x70/0x70 [ 903.989244][T17151] ? __virt_addr_valid+0x10c/0x380 [ 903.994416][T17151] ? __virt_addr_valid+0x10c/0x380 [ 903.999590][T17151] ? __virt_addr_valid+0x10c/0x380 [ 904.004766][T17151] ? __check_object_size+0x4fc/0xa40 [ 904.010106][T17151] kcm_sendmsg+0xddc/0x27b0 [ 904.014711][T17151] ? kcm_getsockopt+0x280/0x280 [ 904.019622][T17151] ? apparmor_socket_sendmsg+0x8e/0x330 [ 904.025239][T17151] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 904.030562][T17151] ? security_socket_sendmsg+0x80/0xa0 [ 904.036048][T17151] ? kcm_getsockopt+0x280/0x280 [ 904.040934][T17151] ____sys_sendmsg+0x61b/0x980 [ 904.045748][T17151] ? __asan_memset+0x22/0x40 [ 904.050396][T17151] ? __sys_sendmsg_sock+0x30/0x30 [ 904.055447][T17151] ? __import_iovec+0x5f2/0x850 [ 904.060351][T17151] ? import_iovec+0x73/0xa0 [ 904.064893][T17151] ___sys_sendmsg+0x2a6/0x360 [ 904.069609][T17151] ? __sys_sendmsg+0x2b0/0x2b0 [ 904.074424][T17151] ? __fget_files+0x1c/0x460 [ 904.079078][T17151] __se_sys_sendmsg+0x1d0/0x2c0 [ 904.083968][T17151] ? perf_trace_preemptirq_template+0x269/0x330 [ 904.090249][T17151] ? __x64_sys_sendmsg+0x80/0x80 [ 904.095265][T17151] ? lockdep_hardirqs_on+0x98/0x150 [ 904.100513][T17151] do_syscall_64+0x55/0xb0 [ 904.104982][T17151] ? clear_bhb_loop+0x40/0x90 [ 904.109697][T17151] ? clear_bhb_loop+0x40/0x90 [ 904.114432][T17151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.120360][T17151] RIP: 0033:0x7fe2bed9e159 [ 904.124808][T17151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.144448][T17151] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.152890][T17151] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 904.160887][T17151] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 904.168905][T17151] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 904.176911][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.184907][T17151] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 904.192925][T17151] [ 904.545754][T17164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3295'. [ 904.657739][T17164] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3295'. [ 904.914125][T17174] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3299'. [ 905.003495][T17175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3299'. [ 906.452952][T17179] netlink: 16358 bytes leftover after parsing attributes in process `syz.0.3300'. [ 908.420631][T17210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3310'. [ 912.785960][T17258] C: renamed from team_slave_0 (while UP) [ 912.826638][T17258] netlink: 'syz.3.3325': attribute type 4 has an invalid length. [ 912.867629][T17258] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3325'. [ 912.916001][T17258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 913.559469][T17282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.287173][T17301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 914.390838][T17304] netlink: 'syz.3.3337': attribute type 10 has an invalid length. [ 914.407316][T17304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3337'. [ 914.487291][T17304] ipvlan1: entered promiscuous mode [ 914.493991][T17304] ipvlan1: entered allmulticast mode [ 914.500622][T17304] veth0_vlan: entered allmulticast mode [ 914.548569][T17304] bridge0: port 3(ipvlan1) entered blocking state [ 914.561483][T17304] bridge0: port 3(ipvlan1) entered disabled state [ 914.675714][T17304] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 914.823774][T17314] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.3343'. [ 914.905079][T17316] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3344'. [ 914.921089][T17312] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3342'. [ 914.940095][T17316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3344'. [ 915.505644][T17326] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3347'. [ 915.610918][T17328] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.3348'. [ 915.938064][T17333] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.3350'. [ 916.132088][T17334] netlink: 'syz.1.3350': attribute type 2 has an invalid length. [ 916.179319][T17334] netlink: 'syz.1.3350': attribute type 8 has an invalid length. [ 916.203011][T17340] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3351'. [ 916.230312][T17340] netlink: zone id is out of range [ 916.235874][T17340] netlink: zone id is out of range [ 916.286316][T17340] netlink: zone id is out of range [ 916.324397][T17340] netlink: zone id is out of range [ 916.354100][T17340] netlink: zone id is out of range [ 916.360992][T17340] netlink: zone id is out of range [ 917.585345][T17380] netlink: 'syz.0.3361': attribute type 10 has an invalid length. [ 917.618367][T17380] ipvlan1: entered promiscuous mode [ 917.630782][T17380] ipvlan1: entered allmulticast mode [ 917.636910][T17380] veth0_vlan: entered allmulticast mode [ 917.790227][T17380] bridge0: port 3(ipvlan1) entered blocking state [ 917.798409][T17380] bridge0: port 3(ipvlan1) entered disabled state [ 918.170499][T17396] FAULT_INJECTION: forcing a failure. [ 918.170499][T17396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.184905][T17396] CPU: 1 PID: 17396 Comm: syz.0.3369 Not tainted syzkaller #0 [ 918.192429][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.202531][T17396] Call Trace: [ 918.205854][T17396] [ 918.208830][T17396] dump_stack_lvl+0x18c/0x250 [ 918.213592][T17396] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 918.219807][T17396] ? show_regs_print_info+0x20/0x20 [ 918.225157][T17396] ? load_image+0x420/0x420 [ 918.229723][T17396] should_fail_ex+0x394/0x4c0 [ 918.234466][T17396] _copy_from_iter+0x1cd/0x1290 [ 918.239401][T17396] ? copyout_mc+0x70/0x70 [ 918.243799][T17396] ? __virt_addr_valid+0x10c/0x380 [ 918.248963][T17396] ? __virt_addr_valid+0x10c/0x380 [ 918.254106][T17396] ? __virt_addr_valid+0x10c/0x380 [ 918.259254][T17396] ? __check_object_size+0x4fc/0xa40 [ 918.264576][T17396] kcm_sendmsg+0xddc/0x27b0 [ 918.269163][T17396] ? kcm_getsockopt+0x280/0x280 [ 918.274058][T17396] ? apparmor_socket_sendmsg+0x8e/0x330 [ 918.279637][T17396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 918.284953][T17396] ? security_socket_sendmsg+0x80/0xa0 [ 918.290449][T17396] ? kcm_getsockopt+0x280/0x280 [ 918.295334][T17396] ____sys_sendmsg+0x61b/0x980 [ 918.300139][T17396] ? __asan_memset+0x22/0x40 [ 918.304767][T17396] ? __sys_sendmsg_sock+0x30/0x30 [ 918.309842][T17396] ? __import_iovec+0x5f2/0x850 [ 918.314746][T17396] ? import_iovec+0x73/0xa0 [ 918.319285][T17396] ___sys_sendmsg+0x2a6/0x360 [ 918.323993][T17396] ? __sys_sendmsg+0x2b0/0x2b0 [ 918.328822][T17396] __se_sys_sendmsg+0x1d0/0x2c0 [ 918.333707][T17396] ? __x64_sys_sendmsg+0x80/0x80 [ 918.338768][T17396] ? syscall_enter_from_user_mode+0x2e/0x80 [ 918.344703][T17396] do_syscall_64+0x55/0xb0 [ 918.349149][T17396] ? clear_bhb_loop+0x40/0x90 [ 918.353857][T17396] ? clear_bhb_loop+0x40/0x90 [ 918.358582][T17396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.364505][T17396] RIP: 0033:0x7f0a18b9e159 [ 918.368949][T17396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.388590][T17396] RSP: 002b:00007f0a199d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.397039][T17396] RAX: ffffffffffffffda RBX: 00007f0a18e26090 RCX: 00007f0a18b9e159 [ 918.405038][T17396] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 918.413033][T17396] RBP: 00007f0a199d4090 R08: 0000000000000000 R09: 0000000000000000 [ 918.421037][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.429041][T17396] R13: 00007f0a18e26128 R14: 00007f0a18e26090 R15: 00007ffd144b3208 [ 918.437050][T17396] [ 918.771958][T17405] net_ratelimit: 8 callbacks suppressed [ 918.771995][T17405] Dead loop on virtual device ip6_vti0, fix it urgently! [ 919.567288][T17422] sit0: entered allmulticast mode [ 919.790829][T17421] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 919.805352][T17421] __nla_validate_parse: 3 callbacks suppressed [ 919.805389][T17421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3378'. [ 919.831164][T17421] ipvlan1: entered promiscuous mode [ 919.837054][T17421] ipvlan1: entered allmulticast mode [ 919.849091][T17421] veth0_vlan: entered allmulticast mode [ 919.865235][T17421] bridge0: port 3(ipvlan1) entered blocking state [ 919.876881][T17421] bridge0: port 3(ipvlan1) entered disabled state [ 919.896573][T17421] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 919.956175][T17433] tap0: tun_chr_ioctl cmd 1074025676 [ 919.961801][T17433] tap0: owner set to 776 [ 920.176902][T17440] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3385'. [ 920.442504][T17451] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3388'. [ 920.465832][T17451] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3388'. [ 920.936888][T17463] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3393'. [ 920.946656][T17463] netlink: zone id is out of range [ 920.952049][T17463] netlink: zone id is out of range [ 920.957367][T17463] netlink: zone id is out of range [ 920.963472][T17463] netlink: zone id is out of range [ 920.968667][T17463] netlink: zone id is out of range [ 920.974150][T17463] netlink: zone id is out of range [ 920.979543][T17463] netlink: zone id is out of range [ 920.984721][T17463] netlink: zone id is out of range [ 921.095778][T17468] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.3394'. [ 921.502175][T17476] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3397'. [ 922.762117][T17502] sit0: entered allmulticast mode [ 922.927411][T17507] team_slave_0: entered promiscuous mode [ 922.934971][T17507] team_slave_0: entered allmulticast mode [ 923.322343][T17517] ªªªªªª: renamed from vlan0 (while UP) [ 923.802388][T17536] tap0: tun_chr_ioctl cmd 1074025676 [ 923.830150][T17536] tap0: owner set to 776 [ 924.122654][T17540] sit0: entered allmulticast mode [ 924.188125][T17541] team_slave_0: entered promiscuous mode [ 924.210537][T17541] team_slave_0: entered allmulticast mode [ 924.330317][T17544] ¥: port 1(team0) entered blocking state [ 924.341751][T17544] ¥: port 1(team0) entered disabled state [ 924.348475][T17544] team0: entered allmulticast mode [ 924.357462][T17544] team_slave_1: entered allmulticast mode [ 924.371669][T17544] batadv0: entered allmulticast mode [ 924.377371][T17544] geneve1: entered allmulticast mode [ 924.420828][T17544] team0: entered promiscuous mode [ 924.428221][T17544] team_slave_1: entered promiscuous mode [ 924.445144][T17544] batadv0: entered promiscuous mode [ 924.457156][T17544] geneve1: entered promiscuous mode [ 924.522677][T17546] net_ratelimit: 5 callbacks suppressed [ 924.522693][T17546] vcan0: mtu less than device minimum [ 924.593770][ T6176] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 924.603656][ T6176] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 925.624757][T17574] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3430'. [ 925.650036][T17574] netlink: zone id is out of range [ 925.657090][T17574] netlink: zone id is out of range [ 925.667738][T17574] netlink: zone id is out of range [ 925.677982][T17574] netlink: zone id is out of range [ 925.691494][T17574] netlink: zone id is out of range [ 925.698275][T17574] netlink: zone id is out of range [ 925.710224][T17574] netlink: zone id is out of range [ 925.715888][T17574] netlink: zone id is out of range [ 925.723231][T17574] netlink: zone id is out of range [ 925.759509][T17581] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3433'. [ 925.782138][T17581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3433'. [ 926.552685][T17593] netlink: 'syz.1.3438': attribute type 29 has an invalid length. [ 926.567377][T17593] netlink: 'syz.1.3438': attribute type 29 has an invalid length. [ 926.579797][T17594] netlink: 'syz.1.3438': attribute type 29 has an invalid length. [ 926.602130][T17593] netlink: 'syz.1.3438': attribute type 29 has an invalid length. [ 926.623746][T17593] netlink: 'syz.1.3438': attribute type 29 has an invalid length. [ 926.936127][T17603] ªªªªªª: renamed from vlan0 (while UP) [ 927.991293][T17636] tap0: tun_chr_ioctl cmd 1074025676 [ 927.996714][T17636] tap0: owner set to 776 [ 928.016862][T17638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3451'. [ 929.194392][T17671] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3463'. [ 929.623382][T17675] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3465'. [ 929.682100][T17680] netlink: 'syz.2.3465': attribute type 39 has an invalid length. [ 930.905990][T17692] netlink: 'syz.2.3471': attribute type 14 has an invalid length. [ 930.940018][T17692] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3471'. [ 931.474557][T17699] ªªªªªª: renamed from vlan0 (while UP) [ 931.572539][T17701] net_ratelimit: 9 callbacks suppressed [ 931.572557][T17701] vcan0: mtu less than device minimum [ 931.843819][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.856803][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.173645][T17721] syzkaller0: entered promiscuous mode [ 932.183032][T17721] syzkaller0: entered allmulticast mode [ 932.230106][T17728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 933.920613][T14617] Bluetooth: hci4: command 0x0406 tx timeout [ 934.565878][T17734] netlink: 'syz.2.3486': attribute type 10 has an invalid length. [ 934.573877][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3486'. [ 934.583491][T17734] ipvlan1: entered promiscuous mode [ 934.588742][T17734] ipvlan1: entered allmulticast mode [ 934.594149][T17734] veth0_vlan: entered allmulticast mode [ 934.602448][T17734] bridge0: port 3(ipvlan1) entered blocking state [ 934.609201][T17734] bridge0: port 3(ipvlan1) entered disabled state [ 934.617864][T17734] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 934.633743][T17736] vcan0: mtu less than device minimum [ 936.161334][T17785] vcan0: mtu less than device minimum [ 937.329487][T17820] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3508'. [ 937.463219][T17820] netlink: 'syz.3.3508': attribute type 39 has an invalid length. [ 938.183996][T17833] vcan0: mtu less than device minimum [ 938.998280][T17848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3512'. [ 939.060921][T17848] sctp: [Deprecated]: syz.3.3512 (pid 17848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.060921][T17848] Use struct sctp_sack_info instead [ 939.306424][T17854] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.3519'. [ 939.723528][T17861] vcan0: mtu less than device minimum [ 940.410878][T17882] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3527'. [ 940.440710][T17882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3527'. [ 940.980378][T17902] vcan0: mtu less than device minimum [ 941.533262][T17919] netlink: 'syz.3.3536': attribute type 2 has an invalid length. [ 941.558096][T17919] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3536'. [ 941.591896][T17920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3536'. [ 941.692044][T17922] netlink: 'syz.3.3536': attribute type 2 has an invalid length. [ 941.769149][T17922] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3536'. [ 942.161567][T17920] hsr_slave_0: left promiscuous mode [ 942.197267][T17920] hsr_slave_1: left promiscuous mode [ 942.424036][T17923] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3536'. [ 942.747804][T17941] vcan0: mtu less than device minimum [ 943.226002][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.538513][T17958] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3545'. [ 943.971588][T17968] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.3549'. [ 943.999170][T17968] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 944.016557][T17968] netlink: 'syz.0.3549': attribute type 2 has an invalid length. [ 944.029235][T17968] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 944.047391][T17968] netlink: 'syz.0.3549': attribute type 4 has an invalid length. [ 944.097434][T17973] vcan0: mtu less than device minimum [ 945.310964][T17998] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3560'. [ 945.701792][T18005] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3562'. [ 945.784491][T18002] syzkaller0: entered promiscuous mode [ 945.819207][T18005] openvswitch: netlink: Flow key attribute not present in set flow. [ 945.851091][T18002] syzkaller0: entered allmulticast mode [ 949.882054][T18012] vcan0: mtu less than device minimum [ 950.041437][T18046] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3573'. [ 950.075042][T18046] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3573'. [ 950.896533][T18062] netlink: 'syz.3.3578': attribute type 10 has an invalid length. [ 950.986769][T18062] team0: Device nlmon0 is of different type [ 951.131652][T18070] vcan0: mtu less than device minimum [ 952.266507][T18101] vcan0: mtu less than device minimum [ 952.393651][T18104] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3592'. [ 952.422542][T18104] bridge_slave_1: default FDB implementation only supports local addresses [ 952.620623][T18108] netlink: 'syz.3.3594': attribute type 13 has an invalid length. [ 952.649533][T18108] netlink: 'syz.3.3594': attribute type 58 has an invalid length. [ 952.684333][T18108] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3594'. [ 953.484750][T18135] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 953.507619][T18135] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 953.521974][T18135] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 953.537197][T18134] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 953.571668][T18135] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 953.669591][T18139] vcan0: mtu less than device minimum [ 953.942937][T18150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 955.439131][T18183] vcan0: mtu less than device minimum [ 955.552760][T18189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.696774][T18195] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3619'. [ 955.731477][T18195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3619'. [ 955.872670][T18202] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3622'. [ 956.482632][T18217] vcan0: mtu less than device minimum [ 956.960521][T18225] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3629'. [ 957.952336][T18246] vcan0: mtu less than device minimum [ 960.532535][T18304] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3651'. [ 960.559779][T18304] netlink: zone id is out of range [ 960.565017][T18304] netlink: zone id is out of range [ 960.609629][T18304] netlink: zone id is out of range [ 960.614865][T18304] netlink: zone id is out of range [ 960.653337][T18304] netlink: zone id is out of range [ 960.659932][T18304] netlink: zone id is out of range [ 960.679133][T18304] netlink: zone id is out of range [ 960.684360][T18304] netlink: zone id is out of range [ 960.713106][T18304] netlink: zone id is out of range [ 960.740515][T18304] netlink: zone id is out of range [ 961.080627][T18310] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.3653'. [ 962.848983][T18346] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3664'. [ 962.876912][T18346] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3664'. [ 962.930505][T18345] netlink: 'syz.2.3663': attribute type 6 has an invalid length. [ 962.948355][T18343] cgroup: fork rejected by pids controller in /syz2 [ 963.353457][ T2951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.501545][ T2951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.604522][ T2951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.760905][ T2951] team0: Port device netdevsim0 removed [ 963.787087][ T2951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.069781][T14617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.085607][T14617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.093645][T14617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.109629][T14617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.132837][T14617] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 965.149263][T14617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.932144][T18516] net_ratelimit: 4 callbacks suppressed [ 965.932161][T18516] vcan0: mtu less than device minimum [ 966.244386][T18496] chnl_net:caif_netlink_parms(): no params data found [ 967.203074][T14617] Bluetooth: hci1: command tx timeout [ 967.223166][ T2951] hsr_slave_0: left promiscuous mode [ 967.238067][ T2951] hsr_slave_1: left promiscuous mode [ 967.254886][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.276645][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.298468][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.336699][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.350941][ T2951] bridge_slave_1: left allmulticast mode [ 967.358417][ T2951] bridge_slave_1: left promiscuous mode [ 967.367315][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.377061][ T2951] bridge_slave_0: left promiscuous mode [ 967.384443][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.509196][ T2951] veth1_macvtap: left promiscuous mode [ 967.515849][ T2951] veth0_macvtap: left promiscuous mode [ 967.524661][ T2951] veth1_vlan: left promiscuous mode [ 967.530350][ T2951] veth0_vlan: left promiscuous mode [ 967.686670][T18556] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.3692'. [ 967.755330][ T2951] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 968.208773][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 968.263629][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 968.312143][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.592439][ T2951] team0 (unregistering): Port device batadv0 removed [ 968.668083][ T2951] bond0 (unregistering): Released all slaves [ 968.883449][T18496] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.886058][T18561] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3694'. [ 968.942704][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.959753][T18496] bridge_slave_0: entered allmulticast mode [ 968.973148][T18496] bridge_slave_0: entered promiscuous mode [ 968.992207][T18496] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.003647][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.011946][T18496] bridge_slave_1: entered allmulticast mode [ 969.019993][T18496] bridge_slave_1: entered promiscuous mode [ 969.124330][T18496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.160967][T18567] vcan0: mtu less than device minimum [ 969.188204][T18496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.280095][T14617] Bluetooth: hci1: command tx timeout [ 969.381747][T18496] team0: Port device team_slave_0 added [ 969.428404][T18496] team0: Port device team_slave_1 added [ 969.583934][T18496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.619222][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.738951][T18496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.784387][T18496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.825253][T18496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.954447][T18496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.466825][T18496] hsr_slave_0: entered promiscuous mode [ 970.495587][T18496] hsr_slave_1: entered promiscuous mode [ 970.546178][T18600] syz.1.3701[18600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.556699][T18600] syz.1.3701[18600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 971.355370][T18622] vcan0: mtu less than device minimum [ 971.372668][T14617] Bluetooth: hci1: command tx timeout [ 972.295686][T18496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 972.323812][T18496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 972.356670][T18496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 972.380694][T18496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 972.529776][T18644] Dead loop on virtual device ip6_vti0, fix it urgently! [ 972.826984][T18496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.921853][T18496] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.042965][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.050235][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.439624][T14617] Bluetooth: hci1: command tx timeout [ 973.591167][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.598457][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.997607][T18675] vcan0: mtu less than device minimum [ 974.743686][T18687] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3719'. [ 974.782872][T18687] netlink: zone id is out of range [ 974.825824][T18687] netlink: zone id is out of range [ 974.904467][T18687] netlink: zone id is out of range [ 974.946970][T18687] netlink: zone id is out of range [ 974.969530][T18687] netlink: zone id is out of range [ 974.975446][T18687] netlink: zone id is out of range [ 975.060433][T18687] netlink: zone id is out of range [ 975.527415][T18496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.635101][T18709] FAULT_INJECTION: forcing a failure. [ 975.635101][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 975.729116][T18709] CPU: 1 PID: 18709 Comm: syz.3.3722 Not tainted syzkaller #0 [ 975.736713][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 975.746828][T18709] Call Trace: [ 975.750163][T18709] [ 975.753131][T18709] dump_stack_lvl+0x18c/0x250 [ 975.757864][T18709] ? show_regs_print_info+0x20/0x20 [ 975.763124][T18709] ? load_image+0x420/0x420 [ 975.767694][T18709] ? __might_sleep+0xe0/0xe0 [ 975.772338][T18709] ? __lock_acquire+0x7d80/0x7d80 [ 975.777420][T18709] should_fail_ex+0x394/0x4c0 [ 975.782162][T18709] should_failslab+0x9/0x20 [ 975.786729][T18709] slab_pre_alloc_hook+0x59/0x300 [ 975.791815][T18709] ? prepend_path+0x8a7/0x950 [ 975.796544][T18709] ? tomoyo_encode+0x2ad/0x570 [ 975.801366][T18709] ? tomoyo_encode+0x2ad/0x570 [ 975.806200][T18709] __kmem_cache_alloc_node+0x53/0x250 [ 975.811641][T18709] ? tomoyo_encode+0x2ad/0x570 [ 975.816459][T18709] __kmalloc+0xa7/0x240 [ 975.820674][T18709] tomoyo_encode+0x2ad/0x570 [ 975.825328][T18709] tomoyo_realpath_from_path+0x57c/0x5c0 [ 975.831024][T18709] ? tomoyo_domain+0xd6/0x120 [ 975.835771][T18709] tomoyo_path_number_perm+0x248/0x5e0 [ 975.841291][T18709] ? tomoyo_path_number_perm+0x217/0x5e0 [ 975.846981][T18709] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 975.852491][T18709] ? trace_call_bpf+0xc3/0x6c0 [ 975.857295][T18709] ? trace_call_bpf+0xc3/0x6c0 [ 975.862088][T18709] ? trace_call_bpf+0x5e9/0x6c0 [ 975.866988][T18709] ? __fget_files+0x28/0x460 [ 975.871623][T18709] security_file_ioctl+0x70/0xa0 [ 975.876627][T18709] __se_sys_ioctl+0x48/0x170 [ 975.881257][T18709] do_syscall_64+0x55/0xb0 [ 975.885706][T18709] ? clear_bhb_loop+0x40/0x90 [ 975.890413][T18709] ? clear_bhb_loop+0x40/0x90 [ 975.895132][T18709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.901054][T18709] RIP: 0033:0x7fe2bed9e159 [ 975.905510][T18709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.925158][T18709] RSP: 002b:00007fe2bcfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.933597][T18709] RAX: ffffffffffffffda RBX: 00007fe2bf026180 RCX: 00007fe2bed9e159 [ 975.941592][T18709] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000009 [ 975.949611][T18709] RBP: 00007fe2bcfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 975.957601][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.965595][T18709] R13: 00007fe2bf026218 R14: 00007fe2bf026180 R15: 00007ffcae5afee8 [ 975.973598][T18709] [ 976.006650][T18709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 976.048683][T18496] veth0_vlan: entered promiscuous mode [ 976.148476][T18496] veth1_vlan: entered promiscuous mode [ 976.297046][T18496] veth0_macvtap: entered promiscuous mode [ 976.345422][T18496] veth1_macvtap: entered promiscuous mode [ 976.514555][T18496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.589016][T18496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.646449][T18496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.657143][T18496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.667104][T18496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.683849][T18496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.699715][T18496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.747004][T18496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.765854][T18496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.783632][T18496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.816750][T18496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.840595][T18496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.866383][T18496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.884350][T18496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.903529][T18496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.922955][T18496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.527737][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.559749][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.604656][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.651321][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.350387][T18751] net_ratelimit: 6 callbacks suppressed [ 978.350410][T18751] vcan0: mtu less than device minimum [ 978.958231][T18760] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3729'. [ 978.988769][T18761] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3729'. [ 979.016796][T18761] bond0: (slave bond_slave_0): Releasing backup interface [ 979.069577][T18761] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 979.533915][T18764] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3730'. [ 980.050382][T18779] vcan0: mtu less than device minimum [ 980.354923][T18784] Dead loop on virtual device ip6_vti0, fix it urgently! [ 980.768315][T18789] syzkaller0: entered promiscuous mode [ 980.781711][T18791] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 980.801661][T18789] syzkaller0: entered allmulticast mode [ 981.611585][T18807] vcan0: mtu less than device minimum [ 981.934024][T18811] sctp: [Deprecated]: syz.3.3749 (pid 18811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.934024][T18811] Use struct sctp_sack_info instead [ 982.005935][T18814] : port 1(ip6gretap0) entered blocking state [ 982.019788][T18814] : port 1(ip6gretap0) entered disabled state [ 982.026220][T18814] ip6gretap0: entered allmulticast mode [ 982.034396][T18814] ip6gretap0: entered promiscuous mode [ 982.044687][T18809] netlink: 'syz.3.3749': attribute type 21 has an invalid length. [ 982.067619][T18809] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 982.107375][T18811] netlink: 'syz.3.3749': attribute type 21 has an invalid length. [ 982.135486][T18816] netlink: 'syz.3.3749': attribute type 3 has an invalid length. [ 982.141199][T18811] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 982.173516][T18816] netlink: 'syz.3.3749': attribute type 6 has an invalid length. [ 982.201563][T18816] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3749'. [ 982.207842][T18812] ip6gretap0: left allmulticast mode [ 982.220839][T18812] ip6gretap0: left promiscuous mode [ 982.243404][T18812] : port 1(ip6gretap0) entered disabled state [ 983.715737][T18848] vcan0: mtu less than device minimum [ 984.667105][T18861] FAULT_INJECTION: forcing a failure. [ 984.667105][T18861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.685708][T18861] CPU: 1 PID: 18861 Comm: syz.2.3764 Not tainted syzkaller #0 [ 984.693323][T18861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 984.703470][T18861] Call Trace: [ 984.706833][T18861] [ 984.709846][T18861] dump_stack_lvl+0x18c/0x250 [ 984.714634][T18861] ? show_regs_print_info+0x20/0x20 [ 984.719935][T18861] ? load_image+0x420/0x420 [ 984.724536][T18861] ? __might_fault+0xaa/0x120 [ 984.729302][T18861] ? __lock_acquire+0x7d80/0x7d80 [ 984.734450][T18861] should_fail_ex+0x394/0x4c0 [ 984.739239][T18861] _copy_from_iter+0x1cd/0x1290 [ 984.744218][T18861] ? copyout_mc+0x70/0x70 [ 984.748639][T18861] ? __virt_addr_valid+0x10c/0x380 [ 984.753834][T18861] ? __virt_addr_valid+0x10c/0x380 [ 984.759052][T18861] ? __virt_addr_valid+0x10c/0x380 [ 984.764263][T18861] ? __check_object_size+0x4fc/0xa40 [ 984.769633][T18861] kcm_sendmsg+0xddc/0x27b0 [ 984.774351][T18861] ? kcm_getsockopt+0x280/0x280 [ 984.779299][T18861] ? apparmor_socket_sendmsg+0x8e/0x330 [ 984.784940][T18861] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 984.790308][T18861] ? security_socket_sendmsg+0x80/0xa0 [ 984.795829][T18861] ? kcm_getsockopt+0x280/0x280 [ 984.800751][T18861] ____sys_sendmsg+0x61b/0x980 [ 984.805588][T18861] ? __asan_memset+0x22/0x40 [ 984.810241][T18861] ? __sys_sendmsg_sock+0x30/0x30 [ 984.815308][T18861] ? __import_iovec+0x5f2/0x850 [ 984.820234][T18861] ? import_iovec+0x73/0xa0 [ 984.824803][T18861] ___sys_sendmsg+0x2a6/0x360 [ 984.829556][T18861] ? __sys_sendmsg+0x2b0/0x2b0 [ 984.834446][T18861] ? __lock_acquire+0x7d80/0x7d80 [ 984.839630][T18861] __se_sys_sendmsg+0x1d0/0x2c0 [ 984.844532][T18861] ? perf_trace_preemptirq_template+0x269/0x330 [ 984.850830][T18861] ? __x64_sys_sendmsg+0x80/0x80 [ 984.855860][T18861] ? lockdep_hardirqs_on+0x98/0x150 [ 984.861123][T18861] do_syscall_64+0x55/0xb0 [ 984.865581][T18861] ? clear_bhb_loop+0x40/0x90 [ 984.870309][T18861] ? clear_bhb_loop+0x40/0x90 [ 984.875038][T18861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.880977][T18861] RIP: 0033:0x7ff84f99e159 [ 984.885440][T18861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.905102][T18861] RSP: 002b:00007ff850887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.913658][T18861] RAX: ffffffffffffffda RBX: 00007ff84fc25fa0 RCX: 00007ff84f99e159 [ 984.921699][T18861] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 984.929707][T18861] RBP: 00007ff850887090 R08: 0000000000000000 R09: 0000000000000000 [ 984.937714][T18861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.945726][T18861] R13: 00007ff84fc26038 R14: 00007ff84fc25fa0 R15: 00007ffcec296b38 [ 984.953794][T18861] [ 985.210189][T18872] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3768'. [ 985.631726][T18879] vcan0: mtu less than device minimum [ 986.275842][T18898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 990.590682][T18966] ªªªªªª: renamed from vlan0 (while UP) [ 992.116057][T19009] sctp: [Deprecated]: syz.3.3809 (pid 19009) Use of int in max_burst socket option deprecated. [ 992.116057][T19009] Use struct sctp_assoc_value instead [ 993.284181][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.311059][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.299943][T19073] netlink: 'syz.0.3829': attribute type 12 has an invalid length. [ 995.307883][T19073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3829'. [ 995.322584][T19069] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3826'. [ 995.339615][T19069] netlink: zone id is out of range [ 995.344984][T19069] netlink: zone id is out of range [ 995.358757][T19069] netlink: zone id is out of range [ 995.376752][T19069] netlink: zone id is out of range [ 995.392684][T19069] netlink: zone id is out of range [ 995.408674][T19069] netlink: zone id is out of range [ 995.420163][T19069] netlink: zone id is out of range [ 995.430632][T19069] netlink: zone id is out of range [ 995.459175][T19069] netlink: zone id is out of range [ 995.466722][T19069] netlink: zone id is out of range [ 999.208811][T19148] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3847'. [ 1000.485507][T19171] net_ratelimit: 3 callbacks suppressed [ 1000.485557][T19171] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1001.722670][T19198] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1001.756378][T19198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1003.069159][T19229] netlink: 'syz.3.3868': attribute type 21 has an invalid length. [ 1003.132378][T19229] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1003.174441][T19229] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1003.569059][T19240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1003.608337][T19250] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1003.639558][T19250] netlink: zone id is out of range [ 1003.644994][T19250] netlink: zone id is out of range [ 1003.669661][T19250] netlink: zone id is out of range [ 1003.675076][T19250] netlink: zone id is out of range [ 1003.699832][T19250] netlink: zone id is out of range [ 1003.705248][T19250] netlink: zone id is out of range [ 1003.735504][T19250] netlink: zone id is out of range [ 1003.764224][T19250] netlink: zone id is out of range [ 1003.791061][T19250] netlink: zone id is out of range [ 1004.044647][T19258] FAULT_INJECTION: forcing a failure. [ 1004.044647][T19258] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.088646][T19258] CPU: 0 PID: 19258 Comm: syz.3.3875 Not tainted syzkaller #0 [ 1004.096219][T19258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1004.106320][T19258] Call Trace: [ 1004.109635][T19258] [ 1004.112605][T19258] dump_stack_lvl+0x18c/0x250 [ 1004.117360][T19258] ? show_regs_print_info+0x20/0x20 [ 1004.122635][T19258] ? load_image+0x420/0x420 [ 1004.127190][T19258] ? __might_sleep+0xe0/0xe0 [ 1004.131843][T19258] ? __lock_acquire+0x7d80/0x7d80 [ 1004.136928][T19258] should_fail_ex+0x394/0x4c0 [ 1004.141699][T19258] should_failslab+0x9/0x20 [ 1004.146259][T19258] slab_pre_alloc_hook+0x59/0x300 [ 1004.151374][T19258] ? tomoyo_encode+0x2ad/0x570 [ 1004.156200][T19258] ? tomoyo_encode+0x2ad/0x570 [ 1004.161032][T19258] __kmem_cache_alloc_node+0x53/0x250 [ 1004.166472][T19258] ? tomoyo_encode+0x2ad/0x570 [ 1004.171301][T19258] __kmalloc+0xa7/0x240 [ 1004.175522][T19258] tomoyo_encode+0x2ad/0x570 [ 1004.180174][T19258] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1004.185847][T19258] ? tomoyo_domain+0xd6/0x120 [ 1004.190654][T19258] tomoyo_path_number_perm+0x248/0x5e0 [ 1004.196145][T19258] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1004.201814][T19258] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1004.207300][T19258] ? ksys_write+0x1d2/0x260 [ 1004.211881][T19258] ? __fget_files+0x28/0x460 [ 1004.216527][T19258] security_file_ioctl+0x70/0xa0 [ 1004.221510][T19258] __se_sys_ioctl+0x48/0x170 [ 1004.226146][T19258] do_syscall_64+0x55/0xb0 [ 1004.230603][T19258] ? clear_bhb_loop+0x40/0x90 [ 1004.235315][T19258] ? clear_bhb_loop+0x40/0x90 [ 1004.240030][T19258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.245960][T19258] RIP: 0033:0x7fe2bed9e159 [ 1004.250410][T19258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.270071][T19258] RSP: 002b:00007fe2bcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.278521][T19258] RAX: ffffffffffffffda RBX: 00007fe2bf025fa0 RCX: 00007fe2bed9e159 [ 1004.286529][T19258] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 1004.294624][T19258] RBP: 00007fe2bcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.302618][T19258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.310614][T19258] R13: 00007fe2bf026038 R14: 00007fe2bf025fa0 R15: 00007ffcae5afee8 [ 1004.318623][T19258] [ 1004.340104][T19258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.190828][T19278] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.3884'. [ 1005.543440][T19287] netlink: 'syz.3.3885': attribute type 3 has an invalid length. [ 1005.551900][T19287] netlink: 'syz.3.3885': attribute type 6 has an invalid length. [ 1005.605997][T19287] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1006.488451][T19307] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1006.511517][T19307] syzkaller0: linktype set to 291 [ 1006.906444][T19315] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1006.929393][T19315] net_ratelimit: 6 callbacks suppressed [ 1006.929412][T19315] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1006.995040][T19315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1007.252333][T19327] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1008.634926][T19356] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3915'. [ 1008.692146][T19356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3915'. [ 1009.809532][T19377] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1010.677370][T19408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.682487][T19409] FAULT_INJECTION: forcing a failure. [ 1010.682487][T19409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.698765][T19408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.707322][T19409] CPU: 0 PID: 19409 Comm: syz.0.3929 Not tainted syzkaller #0 [ 1010.714862][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.724964][T19409] Call Trace: [ 1010.728296][T19409] [ 1010.731268][T19409] dump_stack_lvl+0x18c/0x250 [ 1010.736007][T19409] ? show_regs_print_info+0x20/0x20 [ 1010.741266][T19409] ? load_image+0x420/0x420 [ 1010.745824][T19409] ? __might_fault+0xaa/0x120 [ 1010.750558][T19409] ? __lock_acquire+0x7d80/0x7d80 [ 1010.755634][T19409] ? unix_ioctl+0x259/0x6b0 [ 1010.760232][T19409] should_fail_ex+0x394/0x4c0 [ 1010.764974][T19409] _copy_from_user+0x2f/0xe0 [ 1010.769622][T19409] sock_do_ioctl+0x190/0x310 [ 1010.774273][T19409] ? sock_show_fdinfo+0xb0/0xb0 [ 1010.779209][T19409] sock_ioctl+0x5be/0x7e0 [ 1010.783597][T19409] ? sock_poll+0x3e0/0x3e0 [ 1010.788081][T19409] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1010.793071][T19409] ? security_file_ioctl+0x80/0xa0 [ 1010.798252][T19409] ? sock_poll+0x3e0/0x3e0 [ 1010.802728][T19409] __se_sys_ioctl+0xfd/0x170 [ 1010.807391][T19409] do_syscall_64+0x55/0xb0 [ 1010.811890][T19409] ? clear_bhb_loop+0x40/0x90 [ 1010.816623][T19409] ? clear_bhb_loop+0x40/0x90 [ 1010.821371][T19409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.827321][T19409] RIP: 0033:0x7f0a18b9e159 [ 1010.831831][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.851493][T19409] RSP: 002b:00007f0a199f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.859966][T19409] RAX: ffffffffffffffda RBX: 00007f0a18e25fa0 RCX: 00007f0a18b9e159 [ 1010.867990][T19409] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 1010.876014][T19409] RBP: 00007f0a199f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.884035][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.892035][T19409] R13: 00007f0a18e26038 R14: 00007f0a18e25fa0 R15: 00007ffd144b3208 [ 1010.900107][T19409] [ 1010.994221][T19408] batadv0 (unregistering): left promiscuous mode [ 1011.001488][T19408] batadv0 (unregistering): left allmulticast mode [ 1011.033511][T19408] team0: Port device batadv0 removed [ 1011.180166][T19420] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1011.674130][T19435] netlink: 'syz.0.3940': attribute type 29 has an invalid length. [ 1011.700719][T19435] netlink: 'syz.0.3940': attribute type 29 has an invalid length. [ 1011.720996][T19435] netlink: 'syz.0.3940': attribute type 29 has an invalid length. [ 1011.731375][T19435] netlink: 'syz.0.3940': attribute type 29 has an invalid length. [ 1013.913598][T14617] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 1014.035033][T19513] netlink: 'syz.0.3972': attribute type 29 has an invalid length. [ 1014.076067][T19513] netlink: 'syz.0.3972': attribute type 29 has an invalid length. [ 1014.122815][T19516] netlink: 'syz.0.3972': attribute type 29 has an invalid length. [ 1014.187682][T19513] netlink: 'syz.0.3972': attribute type 29 has an invalid length. [ 1014.507781][T19532] __sock_release: fasync list not empty! [ 1014.583322][T14617] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1014.591540][T14617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1014.601457][T14617] CPU: 1 PID: 14617 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1014.609153][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1014.619247][T14617] Workqueue: hci0 hci_rx_work [ 1014.624057][T14617] Call Trace: [ 1014.627364][T14617] [ 1014.630329][T14617] dump_stack_lvl+0x18c/0x250 [ 1014.635051][T14617] ? show_regs_print_info+0x20/0x20 [ 1014.640285][T14617] ? load_image+0x420/0x420 [ 1014.644828][T14617] sysfs_create_dir_ns+0x26e/0x2a0 [ 1014.649974][T14617] ? __lock_acquire+0x7d80/0x7d80 [ 1014.655032][T14617] ? sysfs_warn_dup+0xa0/0xa0 [ 1014.659744][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 1014.664988][T14617] kobject_add_internal+0x617/0xc90 [ 1014.670254][T14617] kobject_add+0x164/0x240 [ 1014.674708][T14617] ? kobject_init+0x1d0/0x1d0 [ 1014.679426][T14617] ? get_device_parent+0x366/0x390 [ 1014.684624][T14617] device_add+0x3fa/0xc40 [ 1014.688997][T14617] hci_conn_add_sysfs+0xd5/0x1e0 [ 1014.694048][T14617] le_conn_complete_evt+0xe9f/0x1480 [ 1014.699376][T14617] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1014.705647][T14617] ? bt_info+0x180/0x180 [ 1014.709921][T14617] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1014.715592][T14617] ? mutex_unlock+0x10/0x10 [ 1014.720134][T14617] ? skb_pull_data+0xf0/0x1f0 [ 1014.724850][T14617] hci_le_conn_complete_evt+0x187/0x440 [ 1014.730438][T14617] ? hci_remote_host_features_evt+0x150/0x150 [ 1014.736541][T14617] hci_event_packet+0x7b4/0x1280 [ 1014.741524][T14617] ? __lock_acquire+0x7d80/0x7d80 [ 1014.746590][T14617] ? lock_chain_count+0x20/0x20 [ 1014.751477][T14617] ? bis_list+0x290/0x290 [ 1014.755840][T14617] ? kcov_remote_start+0x513/0x810 [ 1014.760984][T14617] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.766234][T14617] ? hci_send_to_monitor+0xd7/0x4f0 [ 1014.771465][T14617] hci_rx_work+0x43a/0xd60 [ 1014.775925][T14617] ? process_scheduled_works+0x975/0x1600 [ 1014.781682][T14617] process_scheduled_works+0xa60/0x1600 [ 1014.787284][T14617] ? worker_attach_to_pool+0x370/0x370 [ 1014.792776][T14617] ? assign_work+0x3cc/0x5d0 [ 1014.797402][T14617] worker_thread+0xa5e/0xfe0 [ 1014.802039][T14617] ? _raw_spin_unlock+0x40/0x40 [ 1014.806922][T14617] ? __kthread_parkme+0x71/0x1c0 [ 1014.811895][T14617] kthread+0x2fa/0x390 [ 1014.815997][T14617] ? pr_cont_work+0x550/0x550 [ 1014.820713][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1014.825351][T14617] ret_from_fork+0x48/0x80 [ 1014.829812][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1014.834437][T14617] ret_from_fork_asm+0x11/0x20 [ 1014.839292][T14617] [ 1014.843408][T14617] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1014.857351][T14617] Bluetooth: hci0: failed to register connection device [ 1014.866485][T14617] Bluetooth: Frame is too long (len 149, expected len 4) [ 1015.776693][T19554] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1015.875987][T19558] syz.0.3991[19558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1015.876178][T19558] syz.0.3991[19558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.880682][T14617] Bluetooth: hci0: command 0x0406 tx timeout [ 1018.070690][T19559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1019.584542][T19615] netlink: 'syz.1.4013': attribute type 29 has an invalid length. [ 1019.605959][T19615] netlink: 'syz.1.4013': attribute type 29 has an invalid length. [ 1019.628345][T19615] netlink: 'syz.1.4013': attribute type 29 has an invalid length. [ 1019.653353][T19615] netlink: 'syz.1.4013': attribute type 29 has an invalid length. [ 1019.826473][T19620] syzkaller0: entered promiscuous mode [ 1019.849854][T19620] syzkaller0: entered allmulticast mode [ 1020.263300][T19640] syz.1.4022: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1020.294146][T19640] CPU: 0 PID: 19640 Comm: syz.1.4022 Not tainted syzkaller #0 [ 1020.301704][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.311807][T19640] Call Trace: [ 1020.315129][T19640] [ 1020.318102][T19640] dump_stack_lvl+0x18c/0x250 [ 1020.322844][T19640] ? show_regs_print_info+0x20/0x20 [ 1020.328096][T19640] ? load_image+0x420/0x420 [ 1020.332654][T19640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1020.339149][T19640] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1020.345705][T19640] warn_alloc+0x246/0x340 [ 1020.350067][T19640] ? stack_trace_save+0xaa/0x100 [ 1020.355040][T19640] ? zone_watermark_ok_safe+0x230/0x230 [ 1020.360632][T19640] ? kasan_set_track+0x5f/0x70 [ 1020.365426][T19640] ? kasan_set_track+0x4e/0x70 [ 1020.370210][T19640] ? __kasan_kmalloc+0x8f/0xa0 [ 1020.375010][T19640] ? xsk_init_queue+0xad/0x100 [ 1020.379803][T19640] ? xsk_setsockopt+0x4c9/0x750 [ 1020.384680][T19640] ? do_sock_setsockopt+0x175/0x1a0 [ 1020.389903][T19640] ? __x64_sys_setsockopt+0x182/0x200 [ 1020.395308][T19640] __vmalloc_node_range+0x129/0x1320 [ 1020.400676][T19640] ? free_vm_area+0x50/0x50 [ 1020.405227][T19640] vmalloc_user+0x74/0x80 [ 1020.409610][T19640] ? xskq_create+0xbf/0x170 [ 1020.414153][T19640] xskq_create+0xbf/0x170 [ 1020.418524][T19640] xsk_init_queue+0xad/0x100 [ 1020.423159][T19640] xsk_setsockopt+0x4c9/0x750 [ 1020.427875][T19640] ? xsk_poll+0x670/0x670 [ 1020.432240][T19640] ? __fget_files+0x28/0x460 [ 1020.436869][T19640] ? aa_sock_opt_perm+0x74/0x100 [ 1020.441838][T19640] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1020.447451][T19640] ? security_socket_setsockopt+0x7e/0xa0 [ 1020.453195][T19640] ? xsk_poll+0x670/0x670 [ 1020.457578][T19640] do_sock_setsockopt+0x175/0x1a0 [ 1020.462653][T19640] ? __fdget+0x180/0x210 [ 1020.466927][T19640] __x64_sys_setsockopt+0x182/0x200 [ 1020.472186][T19640] do_syscall_64+0x55/0xb0 [ 1020.476629][T19640] ? clear_bhb_loop+0x40/0x90 [ 1020.481339][T19640] ? clear_bhb_loop+0x40/0x90 [ 1020.486047][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.491971][T19640] RIP: 0033:0x7ff87cb9e159 [ 1020.496444][T19640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.516083][T19640] RSP: 002b:00007ff87da6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1020.524523][T19640] RAX: ffffffffffffffda RBX: 00007ff87ce25fa0 RCX: 00007ff87cb9e159 [ 1020.532523][T19640] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 1020.540523][T19640] RBP: 00007ff87cc3503b R08: 0000000000004a00 R09: 0000000000000000 [ 1020.548526][T19640] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1020.556527][T19640] R13: 00007ff87ce26038 R14: 00007ff87ce25fa0 R15: 00007fff8fbbc5b8 [ 1020.564561][T19640] [ 1020.580286][T19640] Mem-Info: [ 1020.583627][T19640] active_anon:5713 inactive_anon:0 isolated_anon:0 [ 1020.583627][T19640] active_file:19261 inactive_file:40233 isolated_file:0 [ 1020.583627][T19640] unevictable:768 dirty:64 writeback:0 [ 1020.583627][T19640] slab_reclaimable:10898 slab_unreclaimable:96110 [ 1020.583627][T19640] mapped:24963 shmem:1361 pagetables:530 [ 1020.583627][T19640] sec_pagetables:0 bounce:0 [ 1020.583627][T19640] kernel_misc_reclaimable:0 [ 1020.583627][T19640] free:1344275 free_pcp:8785 free_cma:0 [ 1020.646621][T19640] Node 0 active_anon:22852kB inactive_anon:0kB active_file:77044kB inactive_file:160732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99852kB dirty:256kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11800kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no [ 1020.680547][T19640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1020.724909][T19640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.758361][T19640] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1020.765500][T19640] Node 0 DMA32 free:1468360kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22912kB inactive_anon:0kB active_file:77044kB inactive_file:159908kB unevictable:1536kB writepending:256kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:13156kB free_cma:0kB [ 1020.797239][T19640] lowmem_reserve[]: 0 0 0 0 0 [ 1020.803347][T19640] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1020.858284][T19640] lowmem_reserve[]: 0 0 0 0 0 [ 1020.869242][T19640] Node 1 Normal free:3893140kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:11868kB free_cma:0kB [ 1020.900293][T19640] lowmem_reserve[]: 0 0 0 0 0 [ 1020.905832][T19640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1020.929120][T19640] Node 0 DMA32: 2082*4kB (UME) 1384*8kB (UME) 1226*16kB (UME) 755*32kB (UME) 518*64kB (UME) 227*128kB (UME) 146*256kB (UME) 50*512kB (UME) 14*1024kB (UM) 6*2048kB (M) 306*4096kB (UM) = 1468360kB [ 1020.979285][T19640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1021.004482][T19640] Node 1 Normal: 205*4kB (UME) 28*8kB (UME) 36*16kB (UME) 64*32kB (UME) 25*64kB (UME) 10*128kB (UME) 2*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3893140kB [ 1021.030161][T19640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1021.040917][T19640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1021.050624][T19640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1021.066794][T19640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1021.078168][T19640] 60855 total pagecache pages [ 1021.083546][T19640] 0 pages in swap cache [ 1021.087851][T19640] Free swap = 124996kB [ 1021.116500][T19640] Total swap = 124996kB [ 1021.128950][T19640] 2097051 pages RAM [ 1021.136426][T19640] 0 pages HighMem/MovableOnly [ 1021.146946][T19640] 416960 pages reserved [ 1021.153688][T19640] 0 pages cma reserved [ 1021.416811][T14617] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1021.432915][T14617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1021.444818][T14617] CPU: 0 PID: 14617 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1021.452527][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.462622][T14617] Workqueue: hci2 hci_rx_work [ 1021.467342][T14617] Call Trace: [ 1021.470651][T14617] [ 1021.473624][T14617] dump_stack_lvl+0x18c/0x250 [ 1021.478346][T14617] ? show_regs_print_info+0x20/0x20 [ 1021.483627][T14617] ? load_image+0x420/0x420 [ 1021.488194][T14617] sysfs_create_dir_ns+0x26e/0x2a0 [ 1021.493349][T14617] ? __lock_acquire+0x7d80/0x7d80 [ 1021.498424][T14617] ? sysfs_warn_dup+0xa0/0xa0 [ 1021.503164][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 1021.508426][T14617] kobject_add_internal+0x617/0xc90 [ 1021.513685][T14617] kobject_add+0x164/0x240 [ 1021.518153][T14617] ? kobject_init+0x1d0/0x1d0 [ 1021.522877][T14617] ? get_device_parent+0x366/0x390 [ 1021.528024][T14617] device_add+0x3fa/0xc40 [ 1021.532397][T14617] hci_conn_add_sysfs+0xd5/0x1e0 [ 1021.537375][T14617] le_conn_complete_evt+0xe9f/0x1480 [ 1021.542703][T14617] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1021.548984][T14617] ? bt_info+0x180/0x180 [ 1021.553257][T14617] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1021.558932][T14617] ? mutex_unlock+0x10/0x10 [ 1021.563497][T14617] ? skb_pull_data+0xf0/0x1f0 [ 1021.568215][T14617] hci_le_conn_complete_evt+0x187/0x440 [ 1021.573791][T14617] ? hci_remote_host_features_evt+0x150/0x150 [ 1021.579894][T14617] hci_event_packet+0x7b4/0x1280 [ 1021.584876][T14617] ? __lock_acquire+0x7d80/0x7d80 [ 1021.589928][T14617] ? lock_chain_count+0x20/0x20 [ 1021.594815][T14617] ? bis_list+0x290/0x290 [ 1021.599273][T14617] ? kcov_remote_start+0x513/0x810 [ 1021.604438][T14617] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.609675][T14617] ? hci_send_to_monitor+0xd7/0x4f0 [ 1021.614911][T14617] hci_rx_work+0x43a/0xd60 [ 1021.619370][T14617] ? process_scheduled_works+0x975/0x1600 [ 1021.625131][T14617] process_scheduled_works+0xa60/0x1600 [ 1021.630744][T14617] ? worker_attach_to_pool+0x370/0x370 [ 1021.636242][T14617] ? assign_work+0x3cc/0x5d0 [ 1021.640871][T14617] worker_thread+0xa5e/0xfe0 [ 1021.645506][T14617] ? _raw_spin_unlock+0x40/0x40 [ 1021.650383][T14617] ? __kthread_parkme+0x71/0x1c0 [ 1021.655361][T14617] kthread+0x2fa/0x390 [ 1021.659478][T14617] ? pr_cont_work+0x550/0x550 [ 1021.664192][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1021.668810][T14617] ret_from_fork+0x48/0x80 [ 1021.673256][T14617] ? kthread_blkcg+0xd0/0xd0 [ 1021.677870][T14617] ret_from_fork_asm+0x11/0x20 [ 1021.682700][T14617] [ 1021.695099][T14617] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1021.709122][T14617] Bluetooth: hci2: failed to register connection device [ 1021.718011][T14617] Bluetooth: Frame is too long (len 149, expected len 4) [ 1023.789557][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1024.691831][T19702] syz.0.4049[19702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1024.692022][T19702] syz.0.4049[19702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1024.796975][T19709] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1025.322511][T19728] syz.2.4062[19728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.322691][T19728] syz.2.4062[19728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.645314][T19745] [ 1025.659128][T19745] ====================================================== [ 1025.666173][T19745] WARNING: possible circular locking dependency detected [ 1025.673219][T19745] syzkaller #0 Not tainted [ 1025.677672][T19745] ------------------------------------------------------ [ 1025.684715][T19745] modprobe/19745 is trying to acquire lock: [ 1025.690629][T19745] ffff888061726a38 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 1025.699562][T19745] [ 1025.699562][T19745] but task is already holding lock: [ 1025.706945][T19745] ffff888017c4ed98 (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x550 [ 1025.716046][T19745] [ 1025.716046][T19745] which lock already depends on the new lock. [ 1025.716046][T19745] [ 1025.726471][T19745] [ 1025.726471][T19745] the existing dependency chain (in reverse order) is: [ 1025.735521][T19745] [ 1025.735521][T19745] -> #1 (&n->list_lock){-.-.}-{2:2}: [ 1025.743027][T19745] _raw_spin_lock_irqsave+0xb4/0x100 [ 1025.748883][T19745] get_partial_node+0x36/0x550 [ 1025.754198][T19745] ___slab_alloc+0x9cc/0x12f0 [ 1025.759420][T19745] __kmem_cache_alloc_node+0x11f/0x250 [ 1025.765426][T19745] __kmalloc_node+0xa6/0x240 [ 1025.770567][T19745] bpf_map_kmalloc_node+0xbc/0x1b0 [ 1025.776317][T19745] trie_update_elem+0x172/0xd60 [ 1025.781722][T19745] bpf_map_update_value+0x64b/0x710 [ 1025.787467][T19745] generic_map_update_batch+0x5de/0x800 [ 1025.793555][T19745] bpf_map_do_batch+0x3f2/0x600 [ 1025.798984][T19745] __sys_bpf+0x381/0x890 [ 1025.803780][T19745] __x64_sys_bpf+0x7c/0x90 [ 1025.808742][T19745] do_syscall_64+0x55/0xb0 [ 1025.813705][T19745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.820231][T19745] [ 1025.820231][T19745] -> #0 (&trie->lock){-.-.}-{2:2}: [ 1025.827552][T19745] __lock_acquire+0x37ef/0x7d80 [ 1025.833039][T19745] lock_acquire+0x19e/0x420 [ 1025.838097][T19745] _raw_spin_lock_irqsave+0xb4/0x100 [ 1025.843925][T19745] trie_delete_elem+0x94/0x630 [ 1025.849242][T19745] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1025.855247][T19745] trace_call_bpf+0x333/0x6c0 [ 1025.860464][T19745] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1025.866587][T19745] perf_trace_lock_acquire+0x342/0x400 [ 1025.872586][T19745] lock_acquire+0x3ef/0x420 [ 1025.877630][T19745] put_cpu_partial+0x91/0x250 [ 1025.882862][T19745] get_partial_node+0x1f1/0x550 [ 1025.888256][T19745] ___slab_alloc+0x9cc/0x12f0 [ 1025.893474][T19745] kmem_cache_alloc_bulk+0x1e6/0x5a0 [ 1025.899310][T19745] mas_alloc_nodes+0x471/0x8c0 [ 1025.904620][T19745] mas_commit_b_node+0x9b9/0x1a00 [ 1025.910187][T19745] mas_wr_modify+0x7e8/0x2bb0 [ 1025.915412][T19745] mas_store_gfp+0x27c/0x390 [ 1025.920566][T19745] do_brk_flags+0xac6/0x10a0 [ 1025.925704][T19745] __se_sys_brk+0xa90/0xd00 [ 1025.930774][T19745] do_syscall_64+0x55/0xb0 [ 1025.935738][T19745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.942178][T19745] [ 1025.942178][T19745] other info that might help us debug this: [ 1025.942178][T19745] [ 1025.952423][T19745] Possible unsafe locking scenario: [ 1025.952423][T19745] [ 1025.959893][T19745] CPU0 CPU1 [ 1025.965274][T19745] ---- ---- [ 1025.970653][T19745] lock(&n->list_lock); [ 1025.974916][T19745] lock(&trie->lock); [ 1025.981527][T19745] lock(&n->list_lock); [ 1025.988314][T19745] lock(&trie->lock); [ 1025.992432][T19745] [ 1025.992432][T19745] *** DEADLOCK *** [ 1025.992432][T19745] [ 1026.000618][T19745] 3 locks held by modprobe/19745: [ 1026.005685][T19745] #0: ffff88807efa27a0 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_brk+0x164/0xd00 [ 1026.015041][T19745] #1: ffff888017c4ed98 (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x550 [ 1026.024569][T19745] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 1026.033921][T19745] [ 1026.033921][T19745] stack backtrace: [ 1026.039824][T19745] CPU: 0 PID: 19745 Comm: modprobe Not tainted syzkaller #0 [ 1026.047135][T19745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1026.057206][T19745] Call Trace: [ 1026.060509][T19745] [ 1026.063492][T19745] dump_stack_lvl+0x18c/0x250 [ 1026.068196][T19745] ? load_image+0x420/0x420 [ 1026.072721][T19745] ? show_regs_print_info+0x20/0x20 [ 1026.077953][T19745] ? print_circular_bug+0x12b/0x1a0 [ 1026.083184][T19745] check_noncircular+0x2fc/0x400 [ 1026.088160][T19745] ? print_deadlock_bug+0x5d0/0x5d0 [ 1026.093384][T19745] ? lockdep_lock+0xf5/0x230 [ 1026.097999][T19745] ? mark_lock+0x94/0x320 [ 1026.102359][T19745] ? _find_first_zero_bit+0xd6/0x100 [ 1026.107794][T19745] __lock_acquire+0x37ef/0x7d80 [ 1026.112714][T19745] ? perf_trace_buf_alloc+0x131/0x290 [ 1026.118134][T19745] ? verify_lock_unused+0x140/0x140 [ 1026.123377][T19745] ? perf_trace_lock_acquire+0x1a7/0x400 [ 1026.129094][T19745] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1026.135726][T19745] lock_acquire+0x19e/0x420 [ 1026.140258][T19745] ? trie_delete_elem+0x94/0x630 [ 1026.145277][T19745] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1026.151904][T19745] ? read_lock_is_recursive+0x20/0x20 [ 1026.157311][T19745] _raw_spin_lock_irqsave+0xb4/0x100 [ 1026.162619][T19745] ? trie_delete_elem+0x94/0x630 [ 1026.167582][T19745] ? _raw_spin_lock+0x40/0x40 [ 1026.172281][T19745] trie_delete_elem+0x94/0x630 [ 1026.177071][T19745] ? mark_lock+0x94/0x320 [ 1026.181434][T19745] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1026.186917][T19745] trace_call_bpf+0x333/0x6c0 [ 1026.191618][T19745] ? trace_call_bpf+0xc3/0x6c0 [ 1026.196427][T19745] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1026.202528][T19745] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1026.208102][T19745] perf_trace_lock_acquire+0x342/0x400 [ 1026.213586][T19745] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1026.220209][T19745] lock_acquire+0x3ef/0x420 [ 1026.224733][T19745] ? put_cpu_partial+0x6e/0x250 [ 1026.229694][T19745] ? __rwlock_init+0x150/0x150 [ 1026.234506][T19745] ? read_lock_is_recursive+0x20/0x20 [ 1026.239925][T19745] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1026.245423][T19745] put_cpu_partial+0x91/0x250 [ 1026.250142][T19745] ? put_cpu_partial+0x6e/0x250 [ 1026.255023][T19745] ? put_cpu_partial+0x6e/0x250 [ 1026.259900][T19745] get_partial_node+0x1f1/0x550 [ 1026.264782][T19745] ___slab_alloc+0x9cc/0x12f0 [ 1026.269487][T19745] ? mas_alloc_nodes+0x471/0x8c0 [ 1026.274470][T19745] kmem_cache_alloc_bulk+0x1e6/0x5a0 [ 1026.279787][T19745] ? kmem_cache_alloc_bulk+0xda/0x5a0 [ 1026.285206][T19745] mas_alloc_nodes+0x471/0x8c0 [ 1026.290000][T19745] mas_commit_b_node+0x9b9/0x1a00 [ 1026.295060][T19745] ? trace_call_bpf+0xc3/0x6c0 [ 1026.299848][T19745] ? mas_replace_node+0x7c0/0x7c0 [ 1026.304911][T19745] ? mas_mab_cp+0x66d/0x940 [ 1026.309486][T19745] ? mas_store_b_node+0xcca/0x1080 [ 1026.314633][T19745] mas_wr_modify+0x7e8/0x2bb0 [ 1026.319352][T19745] ? mark_lock+0x94/0x320 [ 1026.323723][T19745] ? __lock_acquire+0x7d80/0x7d80 [ 1026.328788][T19745] ? mas_new_root+0x680/0x680 [ 1026.333529][T19745] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1026.339364][T19745] ? verify_lock_unused+0x140/0x140 [ 1026.344586][T19745] ? perf_trace_lock_acquire+0x342/0x400 [ 1026.350256][T19745] ? mas_wr_walk+0x595/0x5d0 [ 1026.354862][T19745] ? mas_wr_end_piv+0x23d/0x890 [ 1026.359753][T19745] ? mas_wr_store_entry+0x151/0x340 [ 1026.365037][T19745] mas_store_gfp+0x27c/0x390 [ 1026.369675][T19745] ? mas_wr_store_entry+0x340/0x340 [ 1026.374901][T19745] ? down_read_killable+0x340/0x340 [ 1026.380141][T19745] ? up_write+0x1be/0x410 [ 1026.384498][T19745] do_brk_flags+0xac6/0x10a0 [ 1026.389134][T19745] ? vm_brk_flags+0x6c0/0x6c0 [ 1026.393867][T19745] ? mas_prev_setup+0x70d/0x7e0 [ 1026.398757][T19745] __se_sys_brk+0xa90/0xd00 [ 1026.403334][T19745] ? __x64_sys_brk+0x40/0x40 [ 1026.407953][T19745] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1026.413967][T19745] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.419199][T19745] do_syscall_64+0x55/0xb0 [ 1026.423647][T19745] ? clear_bhb_loop+0x40/0x90 [ 1026.428366][T19745] ? clear_bhb_loop+0x40/0x90 [ 1026.433082][T19745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.439015][T19745] RIP: 0033:0x7f79a55ce6c7 [ 1026.443465][T19745] Code: 4d 85 ed 74 e0 4d 85 e4 74 0b 48 89 ef 41 ff d4 4c 89 ee eb da 48 89 f7 e8 e6 1c f3 ff eb f1 0f 1f 40 00 b8 0c 00 00 00 0f 05 <48> 8b 15 6a a7 0d 00 48 89 02 48 39 f8 72 0a 31 c0 c3 0f 1f 80 00 [ 1026.463112][T19745] RSP: 002b:00007ffedf49a088 EFLAGS: 00000206 ORIG_RAX: 000000000000000c [ 1026.471558][T19745] RAX: ffffffffffffffda RBX: 000055bd639cc000 RCX: 00007f79a55ce6c7 [ 1026.479557][T19745] RDX: 00007f79a56b0e50 RSI: 00007f79a56a9ac0 RDI: 000055bd639cc000 [ 1026.487553][T19745] RBP: 000055bd639ab000 R08: 0000000000021000 R09: 0000000000000000 [ 1026.495545][T19745] R10: 00007f79a56a9ac0 R11: 0000000000000206 R12: 00007f79a56b0e50 [ 1026.503538][T19745] R13: 00007f79a56a9b20 R14: 0000000000001000 R15: 00000000000002b0 [ 1026.511545][T19745]